--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"error","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39226","PortSpecifier":{"PortValue":39226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"655af88e-a669-4072-b2a1-a51d9d0a3688","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39226","PortSpecifier":{"PortValue":39226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682792,"nanos":917539956},"http":{"id":"655af88e-a669-4072-b2a1-a51d9d0a3688","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/auth-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"655af88e-a669-4072-b2a1-a51d9d0a3688","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c17b160d-552c-40ac-bce3-bebe64981748","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36558","PortSpecifier":{"PortValue":36558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c17b160d-552c-40ac-bce3-bebe64981748","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c17b160d-552c-40ac-bce3-bebe64981748","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36558","PortSpecifier":{"PortValue":36558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682792,"nanos":953459365},"http":{"id":"c17b160d-552c-40ac-bce3-bebe64981748","method":"POST","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c17b160d-552c-40ac-bce3-bebe64981748","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c17b160d-552c-40ac-bce3-bebe64981748","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c17b160d-552c-40ac-bce3-bebe64981748","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17b160d-552c-40ac-bce3-bebe64981748","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17b160d-552c-40ac-bce3-bebe64981748","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17b160d-552c-40ac-bce3-bebe64981748","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/auth-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c17b160d-552c-40ac-bce3-bebe64981748","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17b160d-552c-40ac-bce3-bebe64981748","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17b160d-552c-40ac-bce3-bebe64981748","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c17b160d-552c-40ac-bce3-bebe64981748","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c17b160d-552c-40ac-bce3-bebe64981748","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39242","PortSpecifier":{"PortValue":39242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39242","PortSpecifier":{"PortValue":39242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682792,"nanos":996988412},"http":{"id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/auth-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f5ac3a6-35aa-4600-a234-f41d9c6469e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36570","PortSpecifier":{"PortValue":36570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36570","PortSpecifier":{"PortValue":36570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682793,"nanos":54279553},"http":{"id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","method":"POST","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/auth-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a663e803-9ec8-424d-87aa-c487ffe73e9a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e"}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e"}
{"level":"error","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e"}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"info","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"info","ts":"2026-07-22T01:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"}
{"level":"info","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37858","PortSpecifier":{"PortValue":37858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37858","PortSpecifier":{"PortValue":37858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682812,"nanos":229475716},"http":{"id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/auth-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a726d51-bc96-4c83-9c08-4e9bfab887cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45892","PortSpecifier":{"PortValue":45892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6d68575-8a4d-4402-90ce-478cdde7db49","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45892","PortSpecifier":{"PortValue":45892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682812,"nanos":263797913},"http":{"id":"e6d68575-8a4d-4402-90ce-478cdde7db49","method":"POST","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/auth-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6d68575-8a4d-4402-90ce-478cdde7db49","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45904","PortSpecifier":{"PortValue":45904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","method":"GET","path":"/maas-api/v1/api-keys/e0addd2f-4fbe-4faf-b5f2-e44df9d8c60d","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45904","PortSpecifier":{"PortValue":45904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682812,"nanos":305262951},"http":{"id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","method":"GET","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e0addd2f-4fbe-4faf-b5f2-e44df9d8c60d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e0addd2f-4fbe-4faf-b5f2-e44df9d8c60d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/auth-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"250e8dc7-0e1c-4983-979e-8fe15ae04290","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37862","PortSpecifier":{"PortValue":37862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","method":"GET","path":"/maas-api/v1/api-keys/e0addd2f-4fbe-4faf-b5f2-e44df9d8c60d","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37862","PortSpecifier":{"PortValue":37862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682812,"nanos":361564677},"http":{"id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","method":"GET","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e0addd2f-4fbe-4faf-b5f2-e44df9d8c60d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e0addd2f-4fbe-4faf-b5f2-e44df9d8c60d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/auth-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f59ae9c-aead-471f-bb36-1ed84da1d69f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"}
{"level":"info","ts":"2026-07-22T01:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e"}
{"level":"info","ts":"2026-07-22T01:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"}
{"level":"info","ts":"2026-07-22T01:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"info","ts":"2026-07-22T01:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"}
{"level":"info","ts":"2026-07-22T01:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"info","ts":"2026-07-22T01:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"info","ts":"2026-07-22T01:13:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:13:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:13:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48642","PortSpecifier":{"PortValue":48642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48642","PortSpecifier":{"PortValue":48642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682829,"nanos":566332224},"http":{"id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/auth-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4460be01-ff83-4ba3-96a7-84f1d574b8b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44980","PortSpecifier":{"PortValue":44980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44980","PortSpecifier":{"PortValue":44980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682829,"nanos":610624676},"http":{"id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","method":"POST","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/auth-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28db9821-3c1e-4f2d-891c-4b05e1fd87a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48658","PortSpecifier":{"PortValue":48658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48658","PortSpecifier":{"PortValue":48658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682829,"nanos":648788640},"http":{"id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-M5v2HxdmVYGOzWtL_3ysCmHA96DPgdDWI8vCvwzxUlpLUatCNDFoaonfJORK"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-M5v2HxdmVYGOzWtL_3ysCmHA96DPgdDWI8vCvwzxUlpLUatCNDFoaonfJORK\"}"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"816f488a-5a4f-4a6f-a1ed-88aa15818938","keyName":"e2e-auth-iso-a-88082e","subscription":"e2e-auth-iso-1a5610","tenant":"e2e-shared-a-e4b9ac","userId":"816f488a-5a4f-4a6f-a1ed-88aa15818938","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/auth-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1a5610"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:13:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0784237-4732-4924-aaa0-aa4b101fe1a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b59c33909be8685203dd3a3932a90f5a67ba0dabf08706e74abbf518ba58da02"}
{"level":"info","ts":"2026-07-22T01:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26a1c9ccfaaa404fbbd5658e14ad02cfb36bd24e0c559e38b26b5076d100da6c"}
{"level":"info","ts":"2026-07-22T01:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f66f3de587ae954ecc3ec987bf2cb730c1d8a3a58a9b177daac9f0d6c1f866cc"}
{"level":"info","ts":"2026-07-22T01:13:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc6ba29fa664ceb5c4659d13fa71134ed603c6c8bda1062bb039cbf94831afcb"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65d8b018d7e9c34df2d80d5da73a53704dae2b64b71fef3775d65eb96387d7ab"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d58bbc3a5feed6ab6f989ccd9acd108238fcbb44ed0e8851e2bc37a48c4c628"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b936a051678368e18cf4f3e0a711f985d0b3eb58fe2533d56ffcde70d78c955a"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ca530457830dac44694e3ae7aaaa7ba7aa5b9f078e1df3ab05b2f47a74c977e"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e1fe645c9d267bb4a80f635e6fb9c0a8726efdb4f45ba26062982a6f974f9e8"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cb79e0a843d7d28f898a835c3b09181ceac5a71f8808b438cce69dc78c0484d"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/698140014169103fb8c87def0abc18e3ec444fab12a336281cba556e752a9f10"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/432f2f518ee589f968d07b65110d2cb3f1cd4ced62c0fef39fee2203153b570e"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdcbf0c181c482fcb4df734eede0572b3a093bf90fb0e1dba82647ed83420043"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db89af515d5d8689cfc1a7e9fafcfec0e716073609a31643f6101c9640cae398"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/494d3e6fd4df5e933222364ef3d4e9195a7bc5e50dfa9cdba0afb815d2bf4fa7"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:13:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9975659491b8135082c12d8b8d20e113de6020ae2a5cfef30e4a104d6b85f67"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19"}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0"}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"error","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59648","PortSpecifier":{"PortValue":59648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59648","PortSpecifier":{"PortValue":59648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682914,"nanos":15688600},"http":{"id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/sub-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc7ce4dc-a52d-4d94-8f82-114fd449a9c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56062","PortSpecifier":{"PortValue":56062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56062","PortSpecifier":{"PortValue":56062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682914,"nanos":58757402},"http":{"id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","method":"POST","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/sub-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f238b463-6d5f-4ad5-bcd5-3266b0d278d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03963701-a399-400e-8d74-a5bb288d2c28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59664","PortSpecifier":{"PortValue":59664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03963701-a399-400e-8d74-a5bb288d2c28","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03963701-a399-400e-8d74-a5bb288d2c28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59664","PortSpecifier":{"PortValue":59664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682914,"nanos":96469045},"http":{"id":"03963701-a399-400e-8d74-a5bb288d2c28","method":"GET","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03963701-a399-400e-8d74-a5bb288d2c28","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EfPHCtRIUqWlyH8a_DsPDBdrLMwVHRIp9Gg6mNx0w6yGUk3lJG2wsKHclWkF"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03963701-a399-400e-8d74-a5bb288d2c28","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EfPHCtRIUqWlyH8a_DsPDBdrLMwVHRIp9Gg6mNx0w6yGUk3lJG2wsKHclWkF\"}"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03963701-a399-400e-8d74-a5bb288d2c28","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"18a453f6-c26a-4643-900f-70dc68d52325","keyName":"e2e-sub-iso-5e65cb","subscription":"e2e-a-only-6af4f5","tenant":"e2e-shared-a-e4b9ac","userId":"18a453f6-c26a-4643-900f-70dc68d52325","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03963701-a399-400e-8d74-a5bb288d2c28","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03963701-a399-400e-8d74-a5bb288d2c28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03963701-a399-400e-8d74-a5bb288d2c28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03963701-a399-400e-8d74-a5bb288d2c28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/sub-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03963701-a399-400e-8d74-a5bb288d2c28","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03963701-a399-400e-8d74-a5bb288d2c28","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03963701-a399-400e-8d74-a5bb288d2c28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03963701-a399-400e-8d74-a5bb288d2c28","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-6af4f5"}
{"level":"info","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03963701-a399-400e-8d74-a5bb288d2c28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03963701-a399-400e-8d74-a5bb288d2c28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56074","PortSpecifier":{"PortValue":56074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56074","PortSpecifier":{"PortValue":56074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682914,"nanos":140603042},"http":{"id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","method":"GET","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dMk4TbKUGHUPZwEX_K5ic5u50LvUn1Dr2bQCnw7B29VqPQ1gcyEuI1uoevED"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4f35c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dMk4TbKUGHUPZwEX_K5ic5u50LvUn1Dr2bQCnw7B29VqPQ1gcyEuI1uoevED\"}"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4f35c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a689ced1-67f3-4d6f-93ad-f07029b9c844","keyName":"e2e-sub-iso-fbc829","subscription":"e2e-b-only-6af4f5","tenant":"e2e-shared-b-4f35c1","userId":"a689ced1-67f3-4d6f-93ad-f07029b9c844","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/sub-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-6af4f5"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:15:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdcadba5-f783-47f9-a9e9-94a1cd6b6a27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:15:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"}
{"level":"info","ts":"2026-07-22T01:15:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"}
{"level":"error","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"}
{"level":"error","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6"}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6"}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b"}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b"}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b"}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900"}
{"level":"info","ts":"2026-07-22T01:15:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:15:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"error","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48690","PortSpecifier":{"PortValue":48690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2abad9a-2074-41b1-9545-c30cd4df172e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48690","PortSpecifier":{"PortValue":48690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682932,"nanos":606665537},"http":{"id":"c2abad9a-2074-41b1-9545-c30cd4df172e","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/sub-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2abad9a-2074-41b1-9545-c30cd4df172e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56378","PortSpecifier":{"PortValue":56378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56378","PortSpecifier":{"PortValue":56378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682932,"nanos":648526733},"http":{"id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","method":"POST","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/sub-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e0e9ba8-f968-4d1f-8c82-fffb9e4243d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48702","PortSpecifier":{"PortValue":48702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48702","PortSpecifier":{"PortValue":48702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682932,"nanos":689796414},"http":{"id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FUJJxA1kcGcM2B7x_Q2GufriDMdeVvaZwzXxAH6OL1xCpo5GzxGX9bFBkWiF"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FUJJxA1kcGcM2B7x_Q2GufriDMdeVvaZwzXxAH6OL1xCpo5GzxGX9bFBkWiF\"}"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"502f9bd8-4d18-4108-95ae-5c68ce74b7b9","keyName":"e2e-sub-iso-4e6f62","subscription":"e2e-shared-sub-386df6","tenant":"e2e-shared-a-e4b9ac","userId":"502f9bd8-4d18-4108-95ae-5c68ce74b7b9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/sub-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-386df6"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cbcde0b-17d8-452d-955e-69ae45c3cbbb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56390","PortSpecifier":{"PortValue":56390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70bdf43e-cb37-4221-a64f-ba99ee433646","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:56390","PortSpecifier":{"PortValue":56390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682932,"nanos":736126027},"http":{"id":"70bdf43e-cb37-4221-a64f-ba99ee433646","method":"POST","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1c25p4iFU2rguteHp_cOUGw43IfkOHDCACl2S94zjpJ3AV8rBJtVQD2MefqKY"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4f35c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1c25p4iFU2rguteHp_cOUGw43IfkOHDCACl2S94zjpJ3AV8rBJtVQD2MefqKY\"}"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4f35c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f2759f0-0695-4210-a792-fb8e78daaad9","keyName":"e2e-sub-iso-a8a044","subscription":"e2e-shared-sub-386df6","tenant":"e2e-shared-b-4f35c1","userId":"4f2759f0-0695-4210-a792-fb8e78daaad9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/sub-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-386df6"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:15:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70bdf43e-cb37-4221-a64f-ba99ee433646","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c9626fda8958129227a1501a30eb9f0b24e276ec979c7f0fcb981e789a8decb"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57dbebff6f6f575ac6a8391d152321b7d250d270cb2443cc376afe4fb9427b07"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c38ac0403d123fe8e5ad7abf3e67f39d1d31c3d62475a50dd5c3b384204f253"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c97720f74a38c988170c1f0c837964b2959c3f3c04a7347eef63de9dfd01ab19"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5390646e8aee87f356b642bdea0b3b46afdcd7165a12ab60a4726e50a9133e78"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdee2010ab36042ee7c8f3537988069d3fba4079ae20ae7d8a25b8d9bc58f810"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88f6357c883cb13b49320f63c6b84c8e7d6fa6fb9f0978900a65a847386b894b"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da5d84f4a3cbef3f2bf8dc4b302ffcfe30451e18d6d72140dcae405a6f57b900"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4e3b360ae3cd72170b2495cae5f0bfc9114f47747f1a254bbb1de85ff338554"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc694a5ee545483e256a6bd68b1686569b32c7e66f013950ae32ca357386e0a6"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66a3cdf3a26522b92ebbe91a2830d1c4ca8a37a95d8b5aca47ac6b05aee97ed5"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/035c91443181926ec9f594a354695abb7bbfb4795af622d5a3d280391987d5b0"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0909222c4516c880443d09bfbf200c81a71a29bcaf74bcc7920f35888aa90d8"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4372c007827c394c318223e46cd684c1378fcf87e2fb29e05c87858f5ee16b8a"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d4e2747b06d98946d7d72d9fa39e584385cd506860f529743fe7bb6d258ead2"}
{"level":"info","ts":"2026-07-22T01:15:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7391ba6771ac7474350ba81f53f4f6b73780691f442ba1f8ad54e92f297ae4c"}
{"level":"debug","ts":"2026-07-22T01:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"}
{"level":"debug","ts":"2026-07-22T01:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89"}
{"level":"error","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8"}
{"level":"error","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2"}
{"level":"error","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f"}
{"level":"error","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2"}
{"level":"info","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917"}
{"level":"error","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"611de6cd1e2917a20eb3ce01b690b74cffeddbeddaedc82f4f3e7d43cc953365","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/611de6cd1e2917a20eb3ce01b690b74cffeddbeddaedc82f4f3e7d43cc953365"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"611de6cd1e2917a20eb3ce01b690b74cffeddbeddaedc82f4f3e7d43cc953365","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849058b1122b765532ef1fd90e79f8cc6537f0998841ce4c62e8c7e47734fbc7"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/611de6cd1e2917a20eb3ce01b690b74cffeddbeddaedc82f4f3e7d43cc953365"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849058b1122b765532ef1fd90e79f8cc6537f0998841ce4c62e8c7e47734fbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849058b1122b765532ef1fd90e79f8cc6537f0998841ce4c62e8c7e47734fbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a6b682aad451cb3c3f35e7a512aa8b596eabce55539e94319934c00f08f9d22"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8cd58070ff630e3648861d909a5380bbe32b38e35db47e37beb2c5ac4b37677"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849058b1122b765532ef1fd90e79f8cc6537f0998841ce4c62e8c7e47734fbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"611de6cd1e2917a20eb3ce01b690b74cffeddbeddaedc82f4f3e7d43cc953365","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["611de6cd1e2917a20eb3ce01b690b74cffeddbeddaedc82f4f3e7d43cc953365"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02586b341fd1dc27b56c348a88eef6397ad0dafa3dcf5de5666f4ca32bc2f242"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"611de6cd1e2917a20eb3ce01b690b74cffeddbeddaedc82f4f3e7d43cc953365","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a6b682aad451cb3c3f35e7a512aa8b596eabce55539e94319934c00f08f9d22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a6b682aad451cb3c3f35e7a512aa8b596eabce55539e94319934c00f08f9d22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7fa197dd7e94f3a36dafe677eb2e62d3a990ce4312234bd136426d08f893b33"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849058b1122b765532ef1fd90e79f8cc6537f0998841ce4c62e8c7e47734fbc7"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a6b682aad451cb3c3f35e7a512aa8b596eabce55539e94319934c00f08f9d22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8cd58070ff630e3648861d909a5380bbe32b38e35db47e37beb2c5ac4b37677","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8cd58070ff630e3648861d909a5380bbe32b38e35db47e37beb2c5ac4b37677"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/430986672dcea6bf5fdf784d89bab56ea0ef3ed2135c7223df5ff112f3348fd4"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8cd58070ff630e3648861d909a5380bbe32b38e35db47e37beb2c5ac4b37677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/611de6cd1e2917a20eb3ce01b690b74cffeddbeddaedc82f4f3e7d43cc953365"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02586b341fd1dc27b56c348a88eef6397ad0dafa3dcf5de5666f4ca32bc2f242","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02586b341fd1dc27b56c348a88eef6397ad0dafa3dcf5de5666f4ca32bc2f242"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a6b682aad451cb3c3f35e7a512aa8b596eabce55539e94319934c00f08f9d22"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8cd58070ff630e3648861d909a5380bbe32b38e35db47e37beb2c5ac4b37677"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02586b341fd1dc27b56c348a88eef6397ad0dafa3dcf5de5666f4ca32bc2f242","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7fa197dd7e94f3a36dafe677eb2e62d3a990ce4312234bd136426d08f893b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7fa197dd7e94f3a36dafe677eb2e62d3a990ce4312234bd136426d08f893b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02586b341fd1dc27b56c348a88eef6397ad0dafa3dcf5de5666f4ca32bc2f242"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7fa197dd7e94f3a36dafe677eb2e62d3a990ce4312234bd136426d08f893b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849058b1122b765532ef1fd90e79f8cc6537f0998841ce4c62e8c7e47734fbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430986672dcea6bf5fdf784d89bab56ea0ef3ed2135c7223df5ff112f3348fd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["430986672dcea6bf5fdf784d89bab56ea0ef3ed2135c7223df5ff112f3348fd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7fa197dd7e94f3a36dafe677eb2e62d3a990ce4312234bd136426d08f893b33"}
{"level":"info","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430986672dcea6bf5fdf784d89bab56ea0ef3ed2135c7223df5ff112f3348fd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/430986672dcea6bf5fdf784d89bab56ea0ef3ed2135c7223df5ff112f3348fd4"}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"611de6cd1e2917a20eb3ce01b690b74cffeddbeddaedc82f4f3e7d43cc953365","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a6b682aad451cb3c3f35e7a512aa8b596eabce55539e94319934c00f08f9d22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8cd58070ff630e3648861d909a5380bbe32b38e35db47e37beb2c5ac4b37677","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02586b341fd1dc27b56c348a88eef6397ad0dafa3dcf5de5666f4ca32bc2f242","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7fa197dd7e94f3a36dafe677eb2e62d3a990ce4312234bd136426d08f893b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"430986672dcea6bf5fdf784d89bab56ea0ef3ed2135c7223df5ff112f3348fd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f"}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f"}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T01:16:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f"}
{"level":"error","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-22T01:16:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51786","PortSpecifier":{"PortValue":51786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51786","PortSpecifier":{"PortValue":51786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682990,"nanos":982254382},"http":{"id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5699d1e6-7d69-4bbb-9b20-97241bd31df8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36234","PortSpecifier":{"PortValue":36234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36234","PortSpecifier":{"PortValue":36234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682991,"nanos":20833167},"http":{"id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","method":"POST","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/rate-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb9c14fc-90f2-460b-9f5b-b13c835731b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51802","PortSpecifier":{"PortValue":51802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51802","PortSpecifier":{"PortValue":51802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682991,"nanos":58445150},"http":{"id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1b8FtzvsREDlzda7x_q32kU1owXK1eUfI6SsXG6LAMAYIIy3wSVQr2Rw0fjLN"}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1b8FtzvsREDlzda7x_q32kU1owXK1eUfI6SsXG6LAMAYIIy3wSVQr2Rw0fjLN\"}"}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9637036f-4b6d-457f-a071-d1f0a4188e32","keyName":"e2e-rate-a-5ca9b2","subscription":"e2e-rate-iso-a-5ca9b2","tenant":"e2e-shared-a-e4b9ac","userId":"9637036f-4b6d-457f-a071-d1f0a4188e32","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-5ca9b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ca9b2","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5ca9b2"}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9637036f-4b6d-457f-a071-d1f0a4188e32","keyName":"e2e-rate-a-5ca9b2","selected_subscription":"e2e-rate-iso-a-5ca9b2","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-5ca9b2@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ca9b2","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac4f98f5-a4d2-4807-8141-36ac69c9416f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51818","PortSpecifier":{"PortValue":51818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"280bae60-71ed-418d-be2e-9c791dcf1d14","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51818","PortSpecifier":{"PortValue":51818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682992,"nanos":133735212},"http":{"id":"280bae60-71ed-418d-be2e-9c791dcf1d14","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1b8FtzvsREDlzda7x_q32kU1owXK1eUfI6SsXG6LAMAYIIy3wSVQr2Rw0fjLN"}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1b8FtzvsREDlzda7x_q32kU1owXK1eUfI6SsXG6LAMAYIIy3wSVQr2Rw0fjLN\"}"}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9637036f-4b6d-457f-a071-d1f0a4188e32","keyName":"e2e-rate-a-5ca9b2","subscription":"e2e-rate-iso-a-5ca9b2","tenant":"e2e-shared-a-e4b9ac","userId":"9637036f-4b6d-457f-a071-d1f0a4188e32","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-5ca9b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ca9b2","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5ca9b2"}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9637036f-4b6d-457f-a071-d1f0a4188e32","keyName":"e2e-rate-a-5ca9b2","selected_subscription":"e2e-rate-iso-a-5ca9b2","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-5ca9b2@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ca9b2","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"280bae60-71ed-418d-be2e-9c791dcf1d14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"251f53bc-a14d-9977-a821-97755f756fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51824","PortSpecifier":{"PortValue":51824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"251f53bc-a14d-9977-a821-97755f756fb2","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"251f53bc-a14d-9977-a821-97755f756fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51824","PortSpecifier":{"PortValue":51824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784682993,"nanos":171670283},"http":{"id":"251f53bc-a14d-9977-a821-97755f756fb2","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1b8FtzvsREDlzda7x_q32kU1owXK1eUfI6SsXG6LAMAYIIy3wSVQr2Rw0fjLN"}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1b8FtzvsREDlzda7x_q32kU1owXK1eUfI6SsXG6LAMAYIIy3wSVQr2Rw0fjLN\"}"}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9637036f-4b6d-457f-a071-d1f0a4188e32","keyName":"e2e-rate-a-5ca9b2","subscription":"e2e-rate-iso-a-5ca9b2","tenant":"e2e-shared-a-e4b9ac","userId":"9637036f-4b6d-457f-a071-d1f0a4188e32","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-5ca9b2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ca9b2","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"251f53bc-a14d-9977-a821-97755f756fb2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-5ca9b2"}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"251f53bc-a14d-9977-a821-97755f756fb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9637036f-4b6d-457f-a071-d1f0a4188e32","keyName":"e2e-rate-a-5ca9b2","selected_subscription":"e2e-rate-iso-a-5ca9b2","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-5ca9b2@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-5ca9b2","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"251f53bc-a14d-9977-a821-97755f756fb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"251f53bc-a14d-9977-a821-97755f756fb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44710","PortSpecifier":{"PortValue":44710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44710","PortSpecifier":{"PortValue":44710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683001,"nanos":886495462},"http":{"id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd5d9eb1-904c-4f78-bc77-ddc85d4cd6ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44c2b113-7b10-96bb-88b2-75e100189578","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59660","PortSpecifier":{"PortValue":59660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44c2b113-7b10-96bb-88b2-75e100189578","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44c2b113-7b10-96bb-88b2-75e100189578","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59660","PortSpecifier":{"PortValue":59660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683001,"nanos":924503788},"http":{"id":"44c2b113-7b10-96bb-88b2-75e100189578","method":"POST","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44c2b113-7b10-96bb-88b2-75e100189578","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44c2b113-7b10-96bb-88b2-75e100189578","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"]}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44c2b113-7b10-96bb-88b2-75e100189578","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d49c1e62296f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=28098aec-f89f-4dbd-b07c-60ecc00dfad8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce4734ca-86a3-4f8a-8af7-4c1295370965","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44c2b113-7b10-96bb-88b2-75e100189578","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44c2b113-7b10-96bb-88b2-75e100189578","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44c2b113-7b10-96bb-88b2-75e100189578","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/rate-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44c2b113-7b10-96bb-88b2-75e100189578","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44c2b113-7b10-96bb-88b2-75e100189578","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44c2b113-7b10-96bb-88b2-75e100189578","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44c2b113-7b10-96bb-88b2-75e100189578","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44c2b113-7b10-96bb-88b2-75e100189578","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44722","PortSpecifier":{"PortValue":44722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44722","PortSpecifier":{"PortValue":44722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683001,"nanos":972145379},"http":{"id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82fbdfd2-055e-4ba1-a519-a7790ad7c1c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44736","PortSpecifier":{"PortValue":44736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44736","PortSpecifier":{"PortValue":44736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683003,"nanos":9098582},"http":{"id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f3866cf-b5ce-4430-9266-06fdb0681cf6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e06cc993-369b-41d2-b601-26ac0b246929","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44750","PortSpecifier":{"PortValue":44750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e06cc993-369b-41d2-b601-26ac0b246929","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e06cc993-369b-41d2-b601-26ac0b246929","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44750","PortSpecifier":{"PortValue":44750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683004,"nanos":44721011},"http":{"id":"e06cc993-369b-41d2-b601-26ac0b246929","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e06cc993-369b-41d2-b601-26ac0b246929","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e06cc993-369b-41d2-b601-26ac0b246929","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e06cc993-369b-41d2-b601-26ac0b246929","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e06cc993-369b-41d2-b601-26ac0b246929","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44752","PortSpecifier":{"PortValue":44752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44752","PortSpecifier":{"PortValue":44752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683005,"nanos":85117207},"http":{"id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f0514cb-e59a-4ba8-8351-50e80e75b1e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44760","PortSpecifier":{"PortValue":44760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44760","PortSpecifier":{"PortValue":44760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683006,"nanos":124532671},"http":{"id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f3ac97f-1b0e-9a53-b5eb-1cbb6f4325ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44768","PortSpecifier":{"PortValue":44768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44768","PortSpecifier":{"PortValue":44768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683007,"nanos":163125085},"http":{"id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d24d82f3-b69c-4acb-90bf-62d0fd1596e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44784","PortSpecifier":{"PortValue":44784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44784","PortSpecifier":{"PortValue":44784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683008,"nanos":201309371},"http":{"id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8231e744-3ad6-4f40-92a5-24ac32374e1b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44786","PortSpecifier":{"PortValue":44786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44786","PortSpecifier":{"PortValue":44786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683009,"nanos":237274466},"http":{"id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb5d5f29-94f6-410b-963a-b41b03bff93c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44798","PortSpecifier":{"PortValue":44798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44798","PortSpecifier":{"PortValue":44798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683010,"nanos":284957588},"http":{"id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"479ad5c8-4d2c-407c-a4ec-f134a8d82623","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5796880e-971f-4511-84a2-790a20b9a10e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39676","PortSpecifier":{"PortValue":39676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5796880e-971f-4511-84a2-790a20b9a10e","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5796880e-971f-4511-84a2-790a20b9a10e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39676","PortSpecifier":{"PortValue":39676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683011,"nanos":324300423},"http":{"id":"5796880e-971f-4511-84a2-790a20b9a10e","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5796880e-971f-4511-84a2-790a20b9a10e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5796880e-971f-4511-84a2-790a20b9a10e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5796880e-971f-4511-84a2-790a20b9a10e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5796880e-971f-4511-84a2-790a20b9a10e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39684","PortSpecifier":{"PortValue":39684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27cb485b-a65d-4450-b24a-c255b48a5074","method":"POST","path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions","host":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39684","PortSpecifier":{"PortValue":39684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683012,"nanos":360578617},"http":{"id":"27cb485b-a65d-4450-b24a-c255b48a5074","method":"POST","headers":{":authority":"e2e-shared-a-e4b9ac.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCQuWnsu2XDBaIyR_bUn3hOPZMPa09kmuxdbHzZEsjtQdQHqgyDputlaXDDj\"}"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","subscription":"e2e-rate-iso-a-8ca5fb","tenant":"e2e-shared-a-e4b9ac","userId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\",\"requestedSubscription\":\"e2e-rate-iso-a-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e4b9ac.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e4b9ac/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0ebe5ab2-e0bd-40b5-89b4-01e08977c30f","keyName":"e2e-rate-a-8ca5fb","selected_subscription":"e2e-rate-iso-a-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-a-e4b9ac/e2e-rate-iso-a-8ca5fb@ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e4b9ac","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8ca5fb","namespace":"ai-tenant-e2e-shared-a-e4b9ac","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e4b9ac/rate-test-model-e4b9ac"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27cb485b-a65d-4450-b24a-c255b48a5074","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37396","PortSpecifier":{"PortValue":37396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","method":"POST","path":"/ai-tenant-e2e-shared-b-4f35c1/rate-test-model-4f35c1/v1/completions","host":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37396","PortSpecifier":{"PortValue":37396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784683012,"nanos":399729412},"http":{"id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","method":"POST","headers":{":authority":"e2e-shared-b-4f35c1.apps.eed271f0-7ad7-4dde-b586-d49c1e62296f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4f35c1/rate-test-model-4f35c1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-f2zBtVY4blVv7uP4_hOagxHOhLTuFqN4QlU6jyX2oyEEfso4nmnUizcilvB7"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4f35c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-f2zBtVY4blVv7uP4_hOagxHOhLTuFqN4QlU6jyX2oyEEfso4nmnUizcilvB7\"}"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4f35c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21793084-db12-4d64-a279-0f02347daf4b","keyName":"e2e-rate-b-8ca5fb","subscription":"e2e-rate-iso-b-8ca5fb","tenant":"e2e-shared-b-4f35c1","userId":"21793084-db12-4d64-a279-0f02347daf4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4f35c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4f35c1/rate-test-model-4f35c1\",\"requestedSubscription\":\"e2e-rate-iso-b-8ca5fb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4f35c1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4f35c1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8ca5fb","namespace":"ai-tenant-e2e-shared-b-4f35c1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-4f35c1/rate-test-model-4f35c1"}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4f35c1/rate-test-model-4f35c1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-4f35c1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8ca5fb"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21793084-db12-4d64-a279-0f02347daf4b","keyName":"e2e-rate-b-8ca5fb","selected_subscription":"e2e-rate-iso-b-8ca5fb","selected_subscription_key":"ai-tenant-e2e-shared-b-4f35c1/e2e-rate-iso-b-8ca5fb@ai-tenant-e2e-shared-b-4f35c1/rate-test-model-4f35c1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4f35c1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8ca5fb","namespace":"ai-tenant-e2e-shared-b-4f35c1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-4f35c1/rate-test-model-4f35c1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-22T01:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1aff609-ea11-4a41-a157-f9f6dcc71f77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-22T01:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7fa197dd7e94f3a36dafe677eb2e62d3a990ce4312234bd136426d08f893b33"}
{"level":"info","ts":"2026-07-22T01:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a7348d58171ce14ed4b09013402f95fa63b046da7cdc4e0937bf8d8f6bfc1c1"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90b935b0324e42cf84fed06c97999d908fd08276d1ba2220653a224230a44fe3"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/849058b1122b765532ef1fd90e79f8cc6537f0998841ce4c62e8c7e47734fbc7"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1457d0b3810e01606b2778c1d063ebf8520989e9ebb779359f326a46413bae75"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b3a42a8edd8e89de84fb71869764188005f190bde18f3483b0c652986fec917"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/611de6cd1e2917a20eb3ce01b690b74cffeddbeddaedc82f4f3e7d43cc953365"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02586b341fd1dc27b56c348a88eef6397ad0dafa3dcf5de5666f4ca32bc2f242"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b5a05fd7929ee84ece9d71280308622d28496244e77d7cad06134a7b4ea3c89"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/430986672dcea6bf5fdf784d89bab56ea0ef3ed2135c7223df5ff112f3348fd4"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d0f26ca6c1eae7c8455c3a963136e840b1054d303c7a35a33580c49ea5ba58f"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33b7d175daddd8818515bf1136d21cb3ee42c57d564a0c1516d01982d171555f"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07bcf741da3c539b8e60d96c61556fdc2844dabe09a8fead6c74415c78145be2"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8cd58070ff630e3648861d909a5380bbe32b38e35db47e37beb2c5ac4b37677"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39098f2a3d3d954bafd6aef3767d48c319f81b3e442b6911c66f57446e836e7c"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15eb244bcf158e871e72ad8d1736a1d458bcadfe3565b0f22564af96d3cf4c3b"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba5bec853ea2a775bd7cdf691c1ad8c5d0e5d18e78663bbdad150e285c03e116"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8003da5412749f99f8d9569a0f6529c4cdd1c1ecec9d453e91d933fdd0b0a18d"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df4049954180c99e797cbc6710b1f029767bcff59b1b90aaa330e906297a5eaa"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/700d8ab580146d2aa14ceaed74ef037eb60c50d1e1c19dda3b2986a6230213a1"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aea8e69162983afdeac5eea4695259b3827a059572d124de58adc7668a949df8"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc21a3bfcd23c6bf8f427234c37f2fd0207a997453761845daa6c42e930d1b77"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a6b682aad451cb3c3f35e7a512aa8b596eabce55539e94319934c00f08f9d22"}
{"level":"info","ts":"2026-07-22T01:16:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/283b807d631c1c30ddb2c13031e03f208553d000255b2dcdeab23d56fe77f721"}