--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1469eefdfafa7186dfc0bcb8b89cef7dd2029e25b9ef2afc8cf130b23ddb7951"}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849febff1c31c35da2918e565665278669dd577ebcce8877b5303de48849e2b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2c4f9f4ce53e3eea5665f5d65c8ea6564f01a7fb57ce241cb7c1cf64ce4f432","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2c4f9f4ce53e3eea5665f5d65c8ea6564f01a7fb57ce241cb7c1cf64ce4f432"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09854c0ba317823d95a845e4a45f79ddcff965552c5fa55fe118a730b180b3bd"}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2c4f9f4ce53e3eea5665f5d65c8ea6564f01a7fb57ce241cb7c1cf64ce4f432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09854c0ba317823d95a845e4a45f79ddcff965552c5fa55fe118a730b180b3bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9649665614af83916573b9aef8c6916375f5c5c524655dd1f7dd14ea3b76b9da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849febff1c31c35da2918e565665278669dd577ebcce8877b5303de48849e2b8"}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9649665614af83916573b9aef8c6916375f5c5c524655dd1f7dd14ea3b76b9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"849febff1c31c35da2918e565665278669dd577ebcce8877b5303de48849e2b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["849febff1c31c35da2918e565665278669dd577ebcce8877b5303de48849e2b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2c4f9f4ce53e3eea5665f5d65c8ea6564f01a7fb57ce241cb7c1cf64ce4f432"}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"849febff1c31c35da2918e565665278669dd577ebcce8877b5303de48849e2b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2c4f9f4ce53e3eea5665f5d65c8ea6564f01a7fb57ce241cb7c1cf64ce4f432","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9649665614af83916573b9aef8c6916375f5c5c524655dd1f7dd14ea3b76b9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"849febff1c31c35da2918e565665278669dd577ebcce8877b5303de48849e2b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153"}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9649665614af83916573b9aef8c6916375f5c5c524655dd1f7dd14ea3b76b9da"}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9649665614af83916573b9aef8c6916375f5c5c524655dd1f7dd14ea3b76b9da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:20:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9649665614af83916573b9aef8c6916375f5c5c524655dd1f7dd14ea3b76b9da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9649665614af83916573b9aef8c6916375f5c5c524655dd1f7dd14ea3b76b9da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9649665614af83916573b9aef8c6916375f5c5c524655dd1f7dd14ea3b76b9da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/849febff1c31c35da2918e565665278669dd577ebcce8877b5303de48849e2b8"}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153"}
{"level":"info","ts":"2026-07-07T19:20:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9649665614af83916573b9aef8c6916375f5c5c524655dd1f7dd14ea3b76b9da"}
{"level":"info","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"643c4559-fe28-48db-86d3-10157cd2947a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34044","PortSpecifier":{"PortValue":34044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"643c4559-fe28-48db-86d3-10157cd2947a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-4e0129.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"643c4559-fe28-48db-86d3-10157cd2947a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34044","PortSpecifier":{"PortValue":34044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452070,"nanos":7131101},"http":{"id":"643c4559-fe28-48db-86d3-10157cd2947a","method":"POST","headers":{":authority":"e2e-inf-a-4e0129.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"643c4559-fe28-48db-86d3-10157cd2947a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"643c4559-fe28-48db-86d3-10157cd2947a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"643c4559-fe28-48db-86d3-10157cd2947a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2768c8eb7c6124a3c06f97ac3ac82aec06412fa9cb34e336d1682a80e39e8cda"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-4e0129.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"643c4559-fe28-48db-86d3-10157cd2947a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"643c4559-fe28-48db-86d3-10157cd2947a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"643c4559-fe28-48db-86d3-10157cd2947a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-4e0129/test-model-4e0129\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"643c4559-fe28-48db-86d3-10157cd2947a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"643c4559-fe28-48db-86d3-10157cd2947a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"643c4559-fe28-48db-86d3-10157cd2947a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"643c4559-fe28-48db-86d3-10157cd2947a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:21:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"643c4559-fe28-48db-86d3-10157cd2947a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34058","PortSpecifier":{"PortValue":34058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1aaef73-7ed1-4758-9421-f1da406367e7","method":"POST","path":"/ai-tenant-e2e-inf-a-4e0129/test-model-4e0129/v1/chat/completions","host":"e2e-inf-a-4e0129.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34058","PortSpecifier":{"PortValue":34058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452074,"nanos":71635799},"http":{"id":"b1aaef73-7ed1-4758-9421-f1da406367e7","method":"POST","headers":{":authority":"e2e-inf-a-4e0129.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-4e0129/test-model-4e0129/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-byA43eySvxNg7sZg_C2q3DnXNxR2z80t75WejQlPkiQXMBkacrBHemZmkuT7"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-4e0129.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-byA43eySvxNg7sZg_C2q3DnXNxR2z80t75WejQlPkiQXMBkacrBHemZmkuT7\"}"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-4e0129.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"52fb1297-d742-4ce3-afa4-f037ba1ccdf7","keyName":"e2e-tenant-inference-4e0129","subscription":"test-model-4e0129-sub","tenant":"e2e-inf-a-4e0129","userId":"52fb1297-d742-4ce3-afa4-f037ba1ccdf7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-4e0129.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-4e0129/test-model-4e0129\",\"requestedSubscription\":\"test-model-4e0129-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-4e0129.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-4e0129","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-4e0129-sub","namespace":"ai-tenant-e2e-inf-a-4e0129","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-4e0129/test-model-4e0129\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-4e0129-sub"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"52fb1297-d742-4ce3-afa4-f037ba1ccdf7","keyName":"e2e-tenant-inference-4e0129","selected_subscription":"test-model-4e0129-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-4e0129/test-model-4e0129-sub@ai-tenant-e2e-inf-a-4e0129/test-model-4e0129","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-4e0129","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-4e0129-sub","namespace":"ai-tenant-e2e-inf-a-4e0129","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1aaef73-7ed1-4758-9421-f1da406367e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34066","PortSpecifier":{"PortValue":34066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1986d97d-cc43-4eef-8339-30d0916026ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-4e0129.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34066","PortSpecifier":{"PortValue":34066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452074,"nanos":364001193},"http":{"id":"1986d97d-cc43-4eef-8339-30d0916026ca","method":"POST","headers":{":authority":"e2e-inf-a-4e0129.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2768c8eb7c6124a3c06f97ac3ac82aec06412fa9cb34e336d1682a80e39e8cda"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-4e0129.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-4e0129/test-model-4e0129\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1986d97d-cc43-4eef-8339-30d0916026ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37600","PortSpecifier":{"PortValue":37600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","method":"POST","path":"/ai-tenant-e2e-inf-b-2e4d95/test-model-2e4d95/v1/chat/completions","host":"e2e-inf-b-2e4d95.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37600","PortSpecifier":{"PortValue":37600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452074,"nanos":400166756},"http":{"id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","method":"POST","headers":{":authority":"e2e-inf-b-2e4d95.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-2e4d95/test-model-2e4d95/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SZX7ujrK2rJ55fHy_i0MjA1QKX9dDSqPfO5wJ1hF2CCrXUMZhbmNBKtOzSb2"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-2e4d95.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SZX7ujrK2rJ55fHy_i0MjA1QKX9dDSqPfO5wJ1hF2CCrXUMZhbmNBKtOzSb2\"}"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-2e4d95.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-2e4d95.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"1469eefdfafa7186dfc0bcb8b89cef7dd2029e25b9ef2afc8cf130b23ddb7951"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-2e4d95.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-2e4d95/test-model-2e4d95/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T19:21:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79973ec2-aef0-4440-9995-8d1e62d57ad0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/518bd68bca8716da1a29b1203207b50789dad5574571724c9bc84be1e444c06f"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1469eefdfafa7186dfc0bcb8b89cef7dd2029e25b9ef2afc8cf130b23ddb7951"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2848efeb8f4c42ad0a4e5e38e6cae5baaf49718a17c0be5253806d9e686df88b"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2768c8eb7c6124a3c06f97ac3ac82aec06412fa9cb34e336d1682a80e39e8cda"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb7a57ba533674b22057008f655421fb408ee7c7a95750a86b43df73405d305e"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6e1a5dd436c937bfbf27b4b886274f2369062379dbf2d269688828c16603218"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/849febff1c31c35da2918e565665278669dd577ebcce8877b5303de48849e2b8"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2c4f9f4ce53e3eea5665f5d65c8ea6564f01a7fb57ce241cb7c1cf64ce4f432"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fe8e5ccc631017c769e7cc7954cb62334d9a49b68c4ce9b7819faa047151808"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/379a19ec2d7ddc53fa7245b6db8ba006f0f71b95c356e34b9faebbfd31efda6c"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8f0321a8632cff877db2812ab473f3d5c625bb772d757fcbb8ebf90dc16083e"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5643f674f8b3c27707afc381c5fc6ab37dad781e0470f545302f75a9ecbec5c"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37a2bb1ec277fe7bda5c71443ef07583d7f3b3e11b46134e08def11cbd2b1153"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cbabed13c040fddbc3bc9297b96e30baa30d553ca642265ec9c7fb58b325182"}
{"level":"info","ts":"2026-07-07T19:21:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9febe29ad7947f181d4e8f404ba5609e1f38bf8a31f1b998d4271b02fffd0cdb"}
{"level":"info","ts":"2026-07-07T19:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9649665614af83916573b9aef8c6916375f5c5c524655dd1f7dd14ea3b76b9da"}
{"level":"info","ts":"2026-07-07T19:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7012ab9cb7fe15909ed087201dbb93514d7bf0cec904aac762e2ee042a5646f4"}
{"level":"info","ts":"2026-07-07T19:21:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a56c55735023d7ba1f43f7d891b524358e2c7c6034349889c8ff8881ee29a6b1"}
{"level":"info","ts":"2026-07-07T19:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab5c6fd194e4f95df261f5f36f0d025a64b15339a55e1cbe9539f728ae8820e1"}
{"level":"info","ts":"2026-07-07T19:22:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09854c0ba317823d95a845e4a45f79ddcff965552c5fa55fe118a730b180b3bd"}
{"level":"debug","ts":"2026-07-07T19:22:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:22:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:22:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"}
{"level":"info","ts":"2026-07-07T19:22:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:22:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:22:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:22:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:22:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:22:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"}
{"level":"debug","ts":"2026-07-07T19:22:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:22:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:22:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9fb6377282922e920460ea45d955ee012bae582c35cd73573680b2f260ce7e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fb6377282922e920460ea45d955ee012bae582c35cd73573680b2f260ce7e1"}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9fb6377282922e920460ea45d955ee012bae582c35cd73573680b2f260ce7e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9fb6377282922e920460ea45d955ee012bae582c35cd73573680b2f260ce7e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9fb6377282922e920460ea45d955ee012bae582c35cd73573680b2f260ce7e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9fb6377282922e920460ea45d955ee012bae582c35cd73573680b2f260ce7e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fb6377282922e920460ea45d955ee012bae582c35cd73573680b2f260ce7e1"}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fb6377282922e920460ea45d955ee012bae582c35cd73573680b2f260ce7e1"}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9fb6377282922e920460ea45d955ee012bae582c35cd73573680b2f260ce7e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:22:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:22:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"}
{"level":"debug","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643"}
{"level":"debug","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643"}
{"level":"debug","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643"}
{"level":"debug","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643"}
{"level":"info","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75"}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:22:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75"}
{"level":"debug","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643"}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:22:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:22:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75"}
{"level":"debug","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75"}
{"level":"debug","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:22:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:22:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:22:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75"}
{"level":"info","ts":"2026-07-07T19:22:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/350a3ac6294efc8be4a91208e06261536b884f88c83bf450d4597cb2664fdaf2"}
{"level":"info","ts":"2026-07-07T19:22:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9fb6377282922e920460ea45d955ee012bae582c35cd73573680b2f260ce7e1"}
{"level":"info","ts":"2026-07-07T19:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/979d0671d8a54ea901ede020acdd0cb48b3a7e8941b406346cbbadcbe5174643"}
{"level":"info","ts":"2026-07-07T19:22:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afe45ab5856f6bf22fcfc70ae6b341e828453b36534494b3f89389aa8b16cc75"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"}
{"level":"error","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1"}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1"}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b"}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713"}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6"}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6"}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"592ad883bdaf87b3e503e2e34d0c6f6e38919a269132f120208e811b31fbeca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6"}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"592ad883bdaf87b3e503e2e34d0c6f6e38919a269132f120208e811b31fbeca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/592ad883bdaf87b3e503e2e34d0c6f6e38919a269132f120208e811b31fbeca1"}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"592ad883bdaf87b3e503e2e34d0c6f6e38919a269132f120208e811b31fbeca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["592ad883bdaf87b3e503e2e34d0c6f6e38919a269132f120208e811b31fbeca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"592ad883bdaf87b3e503e2e34d0c6f6e38919a269132f120208e811b31fbeca1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"592ad883bdaf87b3e503e2e34d0c6f6e38919a269132f120208e811b31fbeca1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/592ad883bdaf87b3e503e2e34d0c6f6e38919a269132f120208e811b31fbeca1"}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6"}
{"level":"error","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"}
{"level":"error","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"}
{"level":"debug","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99"}
{"level":"debug","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99"}
{"level":"debug","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99"}
{"level":"info","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6b421aa448dd6544a85203c4d93606126511149a82580ba08988449a50c7e62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6b421aa448dd6544a85203c4d93606126511149a82580ba08988449a50c7e62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6b421aa448dd6544a85203c4d93606126511149a82580ba08988449a50c7e62"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6b421aa448dd6544a85203c4d93606126511149a82580ba08988449a50c7e62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6b421aa448dd6544a85203c4d93606126511149a82580ba08988449a50c7e62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6b421aa448dd6544a85203c4d93606126511149a82580ba08988449a50c7e62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6b421aa448dd6544a85203c4d93606126511149a82580ba08988449a50c7e62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6b421aa448dd6544a85203c4d93606126511149a82580ba08988449a50c7e62"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:23:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"error","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:23:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44152","PortSpecifier":{"PortValue":44152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"843839a8-350c-40ed-9421-0865e56ccb8a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44152","PortSpecifier":{"PortValue":44152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452237,"nanos":38920254},"http":{"id":"843839a8-350c-40ed-9421-0865e56ccb8a","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"843839a8-350c-40ed-9421-0865e56ccb8a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40456","PortSpecifier":{"PortValue":40456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82992826-d51d-46ca-a9e9-297f2f5e7277","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40456","PortSpecifier":{"PortValue":40456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452237,"nanos":96756687},"http":{"id":"82992826-d51d-46ca-a9e9-297f2f5e7277","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/auth-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82992826-d51d-46ca-a9e9-297f2f5e7277","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44166","PortSpecifier":{"PortValue":44166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","method":"GET","path":"/maas-api/v1/api-keys/2acca1be-ee03-468a-b330-28609f5694ca","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44166","PortSpecifier":{"PortValue":44166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452237,"nanos":177978145},"http":{"id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","method":"GET","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2acca1be-ee03-468a-b330-28609f5694ca",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2acca1be-ee03-468a-b330-28609f5694ca",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32f300b9-290e-4ac2-8812-2e50e94c8a30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40458","PortSpecifier":{"PortValue":40458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","method":"GET","path":"/maas-api/v1/api-keys/61763d62-b154-42aa-a21b-2193e01583db","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40458","PortSpecifier":{"PortValue":40458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452237,"nanos":206256529},"http":{"id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","method":"GET","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/61763d62-b154-42aa-a21b-2193e01583db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/61763d62-b154-42aa-a21b-2193e01583db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/auth-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:23:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5246a7d-ba83-4ce0-9f1d-9970b3a51ee4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60216","PortSpecifier":{"PortValue":60216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60216","PortSpecifier":{"PortValue":60216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452252,"nanos":150584935},"http":{"id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fdd3acb-800c-405f-a521-2d80c34dbee0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43366","PortSpecifier":{"PortValue":43366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fca9d683-155a-45ab-a5a6-e409c753d24d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43366","PortSpecifier":{"PortValue":43366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452252,"nanos":192607448},"http":{"id":"fca9d683-155a-45ab-a5a6-e409c753d24d","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/auth-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fca9d683-155a-45ab-a5a6-e409c753d24d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60218","PortSpecifier":{"PortValue":60218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60218","PortSpecifier":{"PortValue":60218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452252,"nanos":233218457},"http":{"id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","method":"GET","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MwiB4ZkUZLDBMsRS_RR0rKBGjrl728PAseTjgoyD3WGOJIcM1GvN7F3SWVFH"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MwiB4ZkUZLDBMsRS_RR0rKBGjrl728PAseTjgoyD3WGOJIcM1GvN7F3SWVFH\"}"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c218808b-ee96-4a15-8e04-73e5257a0cd1","keyName":"e2e-auth-iso-a-628c83","subscription":"e2e-auth-iso-d5ff28","tenant":"e2e-shared-a-6e21d5","userId":"c218808b-ee96-4a15-8e04-73e5257a0cd1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d5ff28"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb4a4514-3ca5-4b2f-8b07-81998e349edb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45312","PortSpecifier":{"PortValue":45312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60a56fac-14cb-4274-8b8d-78e60918982a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45312","PortSpecifier":{"PortValue":45312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452269,"nanos":304771616},"http":{"id":"60a56fac-14cb-4274-8b8d-78e60918982a","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60a56fac-14cb-4274-8b8d-78e60918982a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34396","PortSpecifier":{"PortValue":34396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34396","PortSpecifier":{"PortValue":34396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452269,"nanos":339424981},"http":{"id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/auth-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31bce610-e5d5-42c6-baf3-48b3e96f7a53","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8820503a-51af-44aa-b01b-0bffa3102633","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34406","PortSpecifier":{"PortValue":34406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8820503a-51af-44aa-b01b-0bffa3102633","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8820503a-51af-44aa-b01b-0bffa3102633","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34406","PortSpecifier":{"PortValue":34406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452269,"nanos":374740693},"http":{"id":"8820503a-51af-44aa-b01b-0bffa3102633","method":"GET","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8820503a-51af-44aa-b01b-0bffa3102633","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JTCohNw3Er84Zq4S_vAAz5W5TIi6MT0KXj37HxfkQeWwctQ82FnVlrOlkgWK"}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8820503a-51af-44aa-b01b-0bffa3102633","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JTCohNw3Er84Zq4S_vAAz5W5TIi6MT0KXj37HxfkQeWwctQ82FnVlrOlkgWK\"}"}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8820503a-51af-44aa-b01b-0bffa3102633","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8820503a-51af-44aa-b01b-0bffa3102633","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"8820503a-51af-44aa-b01b-0bffa3102633","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8820503a-51af-44aa-b01b-0bffa3102633","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T19:24:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8820503a-51af-44aa-b01b-0bffa3102633","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49507f73-9095-4f5d-814e-29ec708241fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47894","PortSpecifier":{"PortValue":47894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49507f73-9095-4f5d-814e-29ec708241fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49507f73-9095-4f5d-814e-29ec708241fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47894","PortSpecifier":{"PortValue":47894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452284,"nanos":328970898},"http":{"id":"49507f73-9095-4f5d-814e-29ec708241fe","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"49507f73-9095-4f5d-814e-29ec708241fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49507f73-9095-4f5d-814e-29ec708241fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49507f73-9095-4f5d-814e-29ec708241fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49507f73-9095-4f5d-814e-29ec708241fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49507f73-9095-4f5d-814e-29ec708241fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49507f73-9095-4f5d-814e-29ec708241fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"49507f73-9095-4f5d-814e-29ec708241fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49507f73-9095-4f5d-814e-29ec708241fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49507f73-9095-4f5d-814e-29ec708241fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49507f73-9095-4f5d-814e-29ec708241fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49507f73-9095-4f5d-814e-29ec708241fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57864","PortSpecifier":{"PortValue":57864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57864","PortSpecifier":{"PortValue":57864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452284,"nanos":364353519},"http":{"id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/auth-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d41cf503-afcd-4cf3-ae97-9948d54d807d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47908","PortSpecifier":{"PortValue":47908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ff12251-c455-4d98-83ac-ef01087131c0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47908","PortSpecifier":{"PortValue":47908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452284,"nanos":412571391},"http":{"id":"0ff12251-c455-4d98-83ac-ef01087131c0","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ff12251-c455-4d98-83ac-ef01087131c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57880","PortSpecifier":{"PortValue":57880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72990caf-bd00-4f1c-9e56-b327ec603737","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57880","PortSpecifier":{"PortValue":57880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452284,"nanos":447708952},"http":{"id":"72990caf-bd00-4f1c-9e56-b327ec603737","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/auth-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72990caf-bd00-4f1c-9e56-b327ec603737","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58436","PortSpecifier":{"PortValue":58436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33f0c102-f099-432a-a49a-9fcfacb7114f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58436","PortSpecifier":{"PortValue":58436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452297,"nanos":248962517},"http":{"id":"33f0c102-f099-432a-a49a-9fcfacb7114f","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33f0c102-f099-432a-a49a-9fcfacb7114f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452297,"nanos":286586719},"http":{"id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/auth-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c54d8103-9b9b-4dea-95c6-0bae3f534dbf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34344","PortSpecifier":{"PortValue":34344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","method":"GET","path":"/maas-api/v1/api-keys/0cd8c320-815a-4abc-b92e-cdb5756e6533","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34344","PortSpecifier":{"PortValue":34344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452297,"nanos":323642865},"http":{"id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","method":"GET","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0cd8c320-815a-4abc-b92e-cdb5756e6533",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0cd8c320-815a-4abc-b92e-cdb5756e6533",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/auth-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b0b5612-fafb-4bc4-9c9f-cc411ccee44e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58450","PortSpecifier":{"PortValue":58450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","method":"GET","path":"/maas-api/v1/api-keys/0cd8c320-815a-4abc-b92e-cdb5756e6533","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58450","PortSpecifier":{"PortValue":58450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452297,"nanos":357451125},"http":{"id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","method":"GET","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0cd8c320-815a-4abc-b92e-cdb5756e6533",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0cd8c320-815a-4abc-b92e-cdb5756e6533",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fdcf58b-8951-4d9d-bc1b-b8c7cced7594","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39864","PortSpecifier":{"PortValue":39864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92061d38-0311-4fb7-9493-cfcfb4792943","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39864","PortSpecifier":{"PortValue":39864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452312,"nanos":339890912},"http":{"id":"92061d38-0311-4fb7-9493-cfcfb4792943","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92061d38-0311-4fb7-9493-cfcfb4792943","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45890","PortSpecifier":{"PortValue":45890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e80d545-b932-4dc9-9743-50a595989ad1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45890","PortSpecifier":{"PortValue":45890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452312,"nanos":376543319},"http":{"id":"2e80d545-b932-4dc9-9743-50a595989ad1","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/auth-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e80d545-b932-4dc9-9743-50a595989ad1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39874","PortSpecifier":{"PortValue":39874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"623aaa57-c435-4b45-948b-f36c753aaa35","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39874","PortSpecifier":{"PortValue":39874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452312,"nanos":414587192},"http":{"id":"623aaa57-c435-4b45-948b-f36c753aaa35","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EcAqyk8QNTuWfrdp_BHJ8A52oDAEiMFtcYaOJipbKcUfdSGaiCXyt1wapRsY"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EcAqyk8QNTuWfrdp_BHJ8A52oDAEiMFtcYaOJipbKcUfdSGaiCXyt1wapRsY\"}"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4cacccdb-03df-4743-ae63-06d4fd67f1fb","keyName":"e2e-auth-iso-a-917ebd","subscription":"e2e-auth-iso-d39e1e","tenant":"e2e-shared-a-6e21d5","userId":"4cacccdb-03df-4743-ae63-06d4fd67f1fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/auth-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d39e1e"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623aaa57-c435-4b45-948b-f36c753aaa35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/063b8f7864b522af071968246c41cc2c72413699dad839ebee6b21219eebf8a1"}
{"level":"info","ts":"2026-07-07T19:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea364f164e8215eccb0eb42c83b2e013165722c880d1d7f1eef638ec2026ac1a"}
{"level":"info","ts":"2026-07-07T19:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/159d820b7507c45e2ab029a6bc4b4f1fa7167bd3d50c44e273e06b491ac33713"}
{"level":"info","ts":"2026-07-07T19:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6734d9cef9af00a42dc3699e89c840d785d2ba7d8416af775fdec1131c1ea3d3"}
{"level":"info","ts":"2026-07-07T19:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fd40bbb182b5d50d33626769c1a1b501270bf1dedcf1100e3b2e1a9e7fac40b"}
{"level":"info","ts":"2026-07-07T19:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/592ad883bdaf87b3e503e2e34d0c6f6e38919a269132f120208e811b31fbeca1"}
{"level":"info","ts":"2026-07-07T19:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1778eead21453e4dc116381a4bc61240657c6da39f1e22237fc578d03f3422c"}
{"level":"info","ts":"2026-07-07T19:25:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48aad2501f42d2d511e65a1e3a459010e3034daa578f59e07891c05fceebe7b6"}
{"level":"info","ts":"2026-07-07T19:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90df49d35377350955fcfb09c675d79dbe6b50e1f6eba829d1e6ee8dfb8cf6c4"}
{"level":"info","ts":"2026-07-07T19:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e439aa9930b13816bc404af0ca680dce93a3716bcdb002f2a96fe30fa51a0c3a"}
{"level":"info","ts":"2026-07-07T19:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a341e45d8ae587e7a411a615f0fee74497dd13bba99b372c414861a67c84ec6"}
{"level":"info","ts":"2026-07-07T19:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6b421aa448dd6544a85203c4d93606126511149a82580ba08988449a50c7e62"}
{"level":"info","ts":"2026-07-07T19:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49b5fdd88efc0c29235d2fb808cb2e8c61d187731bc8ff0713bd9d7d274e1f99"}
{"level":"info","ts":"2026-07-07T19:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ef4f9af3836c369ccfc89481b6d116802d633cfcc48aa1261308113c557c650"}
{"level":"info","ts":"2026-07-07T19:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bd30167b1e5468442316df6269fc19f91deb1d069767107d6860bf7f399aa79"}
{"level":"info","ts":"2026-07-07T19:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ded3aba348b176dc262bfccf250674dfc01f1abdc1d24a7dd3cce5c93bcde03"}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:25:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec"}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206"}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec"}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206"}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206"}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:25:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:25:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"}
{"level":"info","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101"}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57"}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a"}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a"}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec"}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa"}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:26:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:26:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:26:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:26:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206"}
{"level":"info","ts":"2026-07-07T19:26:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57258","PortSpecifier":{"PortValue":57258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57258","PortSpecifier":{"PortValue":57258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452396,"nanos":363157505},"http":{"id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/sub-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"846ecaeb-63da-4e50-8ec9-65bacecee17f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57552","PortSpecifier":{"PortValue":57552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57552","PortSpecifier":{"PortValue":57552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452396,"nanos":400780840},"http":{"id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/sub-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d51dda0a-ace8-4be6-b85a-8074aec323e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57272","PortSpecifier":{"PortValue":57272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57272","PortSpecifier":{"PortValue":57272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452396,"nanos":438207768},"http":{"id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","method":"GET","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12fyjBCwmNl4vqNSi_UjpXN1diJO2pk4cpsdaIKwgDZ0J3fnHDZgHOmvkeCAu"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12fyjBCwmNl4vqNSi_UjpXN1diJO2pk4cpsdaIKwgDZ0J3fnHDZgHOmvkeCAu\"}"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab66f127-4f09-42d2-b640-5bace86a5cd3","keyName":"e2e-sub-iso-f68bf1","subscription":"e2e-a-only-403555","tenant":"e2e-shared-a-6e21d5","userId":"ab66f127-4f09-42d2-b640-5bace86a5cd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/sub-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-403555"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68f34eb7-d1e6-425e-8b10-5af53867edfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57562","PortSpecifier":{"PortValue":57562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57562","PortSpecifier":{"PortValue":57562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452396,"nanos":476419117},"http":{"id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","method":"GET","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-104Tn5SY6Tf0X9iSu_iJekZVCekCvWDi5DkwBqsWbR98l7awMOm2SFW2Khj85"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-104Tn5SY6Tf0X9iSu_iJekZVCekCvWDi5DkwBqsWbR98l7awMOm2SFW2Khj85\"}"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce0896a0-2fc2-4c9b-9a3d-d0ef78ef5fd0","keyName":"e2e-sub-iso-44534e","subscription":"e2e-b-only-403555","tenant":"e2e-shared-b-912fa0","userId":"ce0896a0-2fc2-4c9b-9a3d-d0ef78ef5fd0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/sub-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-403555"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd8f7667-cf5a-45e0-891c-4f25e03153e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33170","PortSpecifier":{"PortValue":33170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33170","PortSpecifier":{"PortValue":33170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452404,"nanos":237634645},"http":{"id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/sub-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a007d39-af55-4ab1-a465-f51277f0ef5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49926","PortSpecifier":{"PortValue":49926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"528bcfaf-896c-42c3-846a-4eb59628584a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49926","PortSpecifier":{"PortValue":49926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452404,"nanos":270642243},"http":{"id":"528bcfaf-896c-42c3-846a-4eb59628584a","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/sub-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"528bcfaf-896c-42c3-846a-4eb59628584a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33178","PortSpecifier":{"PortValue":33178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33178","PortSpecifier":{"PortValue":33178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452404,"nanos":303630957},"http":{"id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Z9htBOafgcEMcAwn_KkEveQq8FcXgQAPxATb0kdigacGJX1m7oUrPCouk4BG"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Z9htBOafgcEMcAwn_KkEveQq8FcXgQAPxATb0kdigacGJX1m7oUrPCouk4BG\"}"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0188b5cb-fe04-4380-a373-333eabc13a4b","keyName":"e2e-sub-iso-087e4f","subscription":"e2e-shared-sub-113699","tenant":"e2e-shared-a-6e21d5","userId":"0188b5cb-fe04-4380-a373-333eabc13a4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/sub-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-113699"}
{"level":"info","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aef06b79-8d1d-4182-8717-b9c5fe4d3176","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49938","PortSpecifier":{"PortValue":49938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4418269-d459-430d-b7a3-b2db34b5f187","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49938","PortSpecifier":{"PortValue":49938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452404,"nanos":330240808},"http":{"id":"b4418269-d459-430d-b7a3-b2db34b5f187","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19SGr9dVtdtmiOiYw_PrrKamkEo4a22aWlqZUib2LBUL92T0Uzwo7gPZQXtct"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19SGr9dVtdtmiOiYw_PrrKamkEo4a22aWlqZUib2LBUL92T0Uzwo7gPZQXtct\"}"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6a884d7a-7732-4a5c-a891-feb29120ae23","keyName":"e2e-sub-iso-b1fea5","subscription":"e2e-shared-sub-113699","tenant":"e2e-shared-b-912fa0","userId":"6a884d7a-7732-4a5c-a891-feb29120ae23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/sub-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-113699"}
{"level":"info","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:26:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4418269-d459-430d-b7a3-b2db34b5f187","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26e22b749167e6cb70f90a91b83ca7b526361f63997541c37cc76320cc0f7246"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f26d31cd86f9083af2e2c59009a2f7c014efd412ac20f1910ece2a7da8851567"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cc6834a2c8556744c9b913277c945348cc1edacb482f93914ecac1d7e88a101"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55064dea39c490f4ef96794d847ca854735da1bc970bdcf4002bc5de41ce02d8"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9462502ffd9d9da0def2bebd137b60e295efaf4ceb5093a1bbd23875c7ba9b4a"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1e876d33db0940714d13bad05edbd5785400ec27fa733c0e8a5337317b68db9"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a1d5c6c2b8c847bbfe443590481c65ed4e112d44b08e27a11ebb58b88c3ce57"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c35a984e2228eea86d73a67862f61e4e805dee7ae50befc1a0ab7a07c873a4aa"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a11ee264ff7785305d9c571dcc8ae7c2b1518ffecdaf99dfaafba40f7315206"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efa5fb8b038611b73c0c7ad4cf6f72e8b9b4ae6a3be63fe8b68e835e974ef3b1"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9332adf391ffa99b4d9ac032c70f99c7e05725e44b090fefc6e597178704ca5"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f3f4fd1a8e5473fe3ce6b26daa5c51fa6019a7ce776af43cb26b87262d034f5"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca09a324021b3cd4e4c978e658be17234d2d7401280aa1f7703fcee6de27c3ec"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0da8fc2d0897d99dc8d2c42c2cacaeaf03e23c33f93740b140cbd52ff17b0340"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1572cffddb9ff511b1b0d3c9944fe2b920ce6b58252bbb94006eec80e249a251"}
{"level":"info","ts":"2026-07-07T19:26:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc2b12650f72903321b092219d7cc8ab9890f799190c8af8396c5c69e51b270b"}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555"}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555"}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec"}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec"}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"}
{"level":"error","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"}
{"level":"info","ts":"2026-07-07T19:27:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:27:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a"}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a"}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a"}
{"level":"debug","ts":"2026-07-07T19:27:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"}
{"level":"error","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"error","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:27:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:27:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:28:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec"}
{"level":"debug","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"}
{"level":"info","ts":"2026-07-07T19:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51668","PortSpecifier":{"PortValue":51668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"323eb96a-d983-485e-aa59-7c1cd151530d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51668","PortSpecifier":{"PortValue":51668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452482,"nanos":531188913},"http":{"id":"323eb96a-d983-485e-aa59-7c1cd151530d","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"323eb96a-d983-485e-aa59-7c1cd151530d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37036","PortSpecifier":{"PortValue":37036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37036","PortSpecifier":{"PortValue":37036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452482,"nanos":569215637},"http":{"id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34e8704c-ced7-4d27-926d-e9e5eabcba79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51680","PortSpecifier":{"PortValue":51680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a089996-9dcb-41bf-b50f-f142168d5626","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51680","PortSpecifier":{"PortValue":51680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452482,"nanos":605623982},"http":{"id":"9a089996-9dcb-41bf-b50f-f142168d5626","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA\"}"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","subscription":"e2e-rate-iso-a-b693bc","tenant":"e2e-shared-a-6e21d5","userId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-b693bc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b693bc"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","selected_subscription":"e2e-rate-iso-a-b693bc","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-b693bc@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a089996-9dcb-41bf-b50f-f142168d5626","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191ea11a-0303-4055-96e9-6998006475cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51686","PortSpecifier":{"PortValue":51686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"191ea11a-0303-4055-96e9-6998006475cb","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191ea11a-0303-4055-96e9-6998006475cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51686","PortSpecifier":{"PortValue":51686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452483,"nanos":665586817},"http":{"id":"191ea11a-0303-4055-96e9-6998006475cb","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA\"}"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","subscription":"e2e-rate-iso-a-b693bc","tenant":"e2e-shared-a-6e21d5","userId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-b693bc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"191ea11a-0303-4055-96e9-6998006475cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b693bc"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191ea11a-0303-4055-96e9-6998006475cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","selected_subscription":"e2e-rate-iso-a-b693bc","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-b693bc@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191ea11a-0303-4055-96e9-6998006475cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191ea11a-0303-4055-96e9-6998006475cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51698","PortSpecifier":{"PortValue":51698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51698","PortSpecifier":{"PortValue":51698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452484,"nanos":702395142},"http":{"id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O6mRVfgDEWAeMgNo_9d2g2WpmXR0MiRn7HPl0ayVWZdiNgj2I74AFTSUu5kA\"}"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","subscription":"e2e-rate-iso-a-b693bc","tenant":"e2e-shared-a-6e21d5","userId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-b693bc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b693bc"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d16507bf-0d2c-4edb-b1ea-0dd7bb71e09f","keyName":"e2e-rate-a-b693bc","selected_subscription":"e2e-rate-iso-a-b693bc","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-b693bc@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b693bc","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ce310c9-1cc6-4a08-a86b-a7c9a19a3026","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59976","PortSpecifier":{"PortValue":59976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59976","PortSpecifier":{"PortValue":59976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452495,"nanos":468449704},"http":{"id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c9720d6-3ebb-96ef-a7c5-5c1e0c331dd8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50998","PortSpecifier":{"PortValue":50998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50998","PortSpecifier":{"PortValue":50998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452495,"nanos":535418594},"http":{"id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"36906c41-318e-45bf-98b6-7e27015da907","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"]}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d343df3116a0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=864833e1-2178-46d0-ab8a-2daa2c57873f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"36906c41-318e-45bf-98b6-7e27015da907","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21efa18c-ab16-4f2f-beda-4faf5f3a0e98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59984","PortSpecifier":{"PortValue":59984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59984","PortSpecifier":{"PortValue":59984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452495,"nanos":569023295},"http":{"id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx\"}"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","subscription":"e2e-rate-iso-a-ef416e","tenant":"e2e-shared-a-6e21d5","userId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-ef416e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ef416e"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","selected_subscription":"e2e-rate-iso-a-ef416e","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-ef416e@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5685e128-751e-4a3d-a1cb-1cce82cba02a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59994","PortSpecifier":{"PortValue":59994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e3dc0a9-035e-4a97-b375-35150decec01","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59994","PortSpecifier":{"PortValue":59994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452496,"nanos":612693933},"http":{"id":"9e3dc0a9-035e-4a97-b375-35150decec01","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx\"}"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","subscription":"e2e-rate-iso-a-ef416e","tenant":"e2e-shared-a-6e21d5","userId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-ef416e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ef416e"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","selected_subscription":"e2e-rate-iso-a-ef416e","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-ef416e@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e3dc0a9-035e-4a97-b375-35150decec01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60004","PortSpecifier":{"PortValue":60004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"183d77ea-bbfe-4130-8ca3-9caac331899f","method":"POST","path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions","host":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60004","PortSpecifier":{"PortValue":60004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452497,"nanos":650679190},"http":{"id":"183d77ea-bbfe-4130-8ca3-9caac331899f","method":"POST","headers":{":authority":"e2e-shared-a-6e21d5.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BZ3a6eEw1MeiKJaw_1hetZGi2IVPd5jYP3p9wUITnJWTVr8kauzfwFtY7vLx\"}"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","subscription":"e2e-rate-iso-a-ef416e","tenant":"e2e-shared-a-6e21d5","userId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\",\"requestedSubscription\":\"e2e-rate-iso-a-ef416e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6e21d5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ef416e"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46d6edb9-cd13-453d-a6ad-ef28154e89eb","keyName":"e2e-rate-a-ef416e","selected_subscription":"e2e-rate-iso-a-ef416e","selected_subscription_key":"ai-tenant-e2e-shared-a-6e21d5/e2e-rate-iso-a-ef416e@ai-tenant-e2e-shared-a-6e21d5/rate-test-model-6e21d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6e21d5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ef416e","namespace":"ai-tenant-e2e-shared-a-6e21d5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"183d77ea-bbfe-4130-8ca3-9caac331899f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51004","PortSpecifier":{"PortValue":51004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"349407ac-680a-4bd7-8879-3b44c81721d7","method":"POST","path":"/ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0/v1/completions","host":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51004","PortSpecifier":{"PortValue":51004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783452497,"nanos":685026343},"http":{"id":"349407ac-680a-4bd7-8879-3b44c81721d7","method":"POST","headers":{":authority":"e2e-shared-b-912fa0.apps.14471896-ce5f-45bc-bfa7-d343df3116a0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-K0UQiGol6BPFO7aA_vKcArBtarKFTRdQcE3EAOtvcQxPJHu0d91InDowT1kc"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-K0UQiGol6BPFO7aA_vKcArBtarKFTRdQcE3EAOtvcQxPJHu0d91InDowT1kc\"}"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ce64692-b8a7-4023-b24f-ee84eacf883a","keyName":"e2e-rate-b-ef416e","subscription":"e2e-rate-iso-b-ef416e","tenant":"e2e-shared-b-912fa0","userId":"7ce64692-b8a7-4023-b24f-ee84eacf883a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0\",\"requestedSubscription\":\"e2e-rate-iso-b-ef416e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-912fa0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-912fa0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ef416e","namespace":"ai-tenant-e2e-shared-b-912fa0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ef416e"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ce64692-b8a7-4023-b24f-ee84eacf883a","keyName":"e2e-rate-b-ef416e","selected_subscription":"e2e-rate-iso-b-ef416e","selected_subscription_key":"ai-tenant-e2e-shared-b-912fa0/e2e-rate-iso-b-ef416e@ai-tenant-e2e-shared-b-912fa0/rate-test-model-912fa0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-912fa0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ef416e","namespace":"ai-tenant-e2e-shared-b-912fa0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:28:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"349407ac-680a-4bd7-8879-3b44c81721d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:28:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b2583bf89a795630148533e693fbab7806c2cd1f8682001a7c2c74f9a3a48fb"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0ef5260b01abb4277b2a16d2ef3b9a0ab3dd7863173c4dc889e65833531b3ec"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbfb77b67ddab407164ae156904256fb885e0479a5f121665e7d2d212771eb56"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/997826b1f908ba556e50e0d8da69d34b6d6614ae48bad66316e02abc811f21e5"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee8d2ed2dc3ee5e943a4c16746e201f35a6ff6cc7f27dd51f2369b6c51670d9f"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f47a20eee22c59908ada4db344f4077fb03e09c0a349ec7baee0a3bb8c257f4"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/906cccabe7422be429945c7ed81af07cb90cdd60cea612cbbc2e8f6ab844d6c7"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4e303dbb2337ef24832c9b2beb11bf4d573955fa127eab38b902b17cf48eded"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d83790e6441fdff384036f08d7cbee3d094bb3f72bc7b6e9f6149d365dcdee5c"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b7749e3c178db3b49b717b86f0b6a7ac6d19d7dbdbeb2ab7f35a38bf3261c09"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f5b46e327fa65977498701899b972d069f14b4b3f2e7014e1c724f5196fff5d"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/400e311f0ff4da633040894a07814776506d3a12acc12313558a4b1b9008f31a"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcd99f4fd3631507c30416af87de316912146664975d11ae8b8182f032706fe8"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2800b4ab4f5f3186f623d37ae43a7938e57d7557e7308a3571f92a9fad992a0a"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc904df9a0af1f0c433849ed1c4b39405808c146a04d5274594bdb8d57f7ffd9"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4289ab3c52ed87fb6ce80b1e469f4f282177dafd86501e872c2d056e6bb0b44f"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/677b2f0526cda1b0210e36517ce9d686076d60037a4398a06e883ad1450f6f7f"}
{"level":"info","ts":"2026-07-07T19:28:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc9ce5e5cd2db75665545dc7f4d337a46935b15d67e062bc057d1d53e0d25555"}
{"level":"info","ts":"2026-07-07T19:29:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35af47bd6d7eaafc5e34355ef48994d14ee83b0cf23793125ff0520821c576bb"}
{"level":"info","ts":"2026-07-07T19:29:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a7428ff824a3ad6b5e5cc7c249b8dd7eb9f97c27c73d715d322cf3c2d1ea89c"}