--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29ac1a53-611a-4c1e-bec8-69d86d7a17b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29ac1a53-611a-4c1e-bec8-69d86d7a17b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29ac1a53-611a-4c1e-bec8-69d86d7a17b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/auth-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29ac1a53-611a-4c1e-bec8-69d86d7a17b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29ac1a53-611a-4c1e-bec8-69d86d7a17b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29ac1a53-611a-4c1e-bec8-69d86d7a17b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29ac1a53-611a-4c1e-bec8-69d86d7a17b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29ac1a53-611a-4c1e-bec8-69d86d7a17b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37396","PortSpecifier":{"PortValue":37396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37396","PortSpecifier":{"PortValue":37396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081725,"nanos":100076252},"http":{"id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","method":"POST","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/auth-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa2c099e-2dc4-47a8-bd0d-2c372749b2e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37486","PortSpecifier":{"PortValue":37486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37486","PortSpecifier":{"PortValue":37486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081725,"nanos":145987456},"http":{"id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/auth-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"001350fd-08b3-44c7-8daf-2cfd4d57d78b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37400","PortSpecifier":{"PortValue":37400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37400","PortSpecifier":{"PortValue":37400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081725,"nanos":182768283},"http":{"id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","method":"POST","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/auth-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:02:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d5b0112-3d91-41a8-bfc9-0d9a7bce82c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61"}
{"level":"info","ts":"2026-07-26T16:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"info","ts":"2026-07-26T16:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"info","ts":"2026-07-26T16:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"}
{"level":"info","ts":"2026-07-26T16:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"}
{"level":"info","ts":"2026-07-26T16:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61"}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:02:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"error","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:02:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34174","PortSpecifier":{"PortValue":34174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34174","PortSpecifier":{"PortValue":34174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081769,"nanos":944808920},"http":{"id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/auth-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e7fbc83-e1d3-492c-a92e-9265d96086fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49012","PortSpecifier":{"PortValue":49012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9454c457-d828-44ec-ae17-7fd6e426a396","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49012","PortSpecifier":{"PortValue":49012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081769,"nanos":984797423},"http":{"id":"9454c457-d828-44ec-ae17-7fd6e426a396","method":"POST","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/auth-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:02:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9454c457-d828-44ec-ae17-7fd6e426a396","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49014","PortSpecifier":{"PortValue":49014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","method":"GET","path":"/maas-api/v1/api-keys/b4dab5e9-1113-4b30-97ba-3c1d5244cb11","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49014","PortSpecifier":{"PortValue":49014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081770,"nanos":30683556},"http":{"id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","method":"GET","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b4dab5e9-1113-4b30-97ba-3c1d5244cb11",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b4dab5e9-1113-4b30-97ba-3c1d5244cb11",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/auth-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fd5b31a-7dc5-4ce2-99a2-5f1ebb5d7d7c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34178","PortSpecifier":{"PortValue":34178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","method":"GET","path":"/maas-api/v1/api-keys/b4dab5e9-1113-4b30-97ba-3c1d5244cb11","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34178","PortSpecifier":{"PortValue":34178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081770,"nanos":62295362},"http":{"id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","method":"GET","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b4dab5e9-1113-4b30-97ba-3c1d5244cb11",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b4dab5e9-1113-4b30-97ba-3c1d5244cb11",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/auth-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:02:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80de9f57-7a89-43ff-a207-fddb39fd8a89","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:02:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:02:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"}
{"level":"info","ts":"2026-07-26T16:02:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61"}
{"level":"info","ts":"2026-07-26T16:02:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:02:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"info","ts":"2026-07-26T16:02:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:02:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"}
{"level":"info","ts":"2026-07-26T16:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"info","ts":"2026-07-26T16:02:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"debug","ts":"2026-07-26T16:03:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"error","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"}
{"level":"error","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"debug","ts":"2026-07-26T16:03:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:03:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:03:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"info","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59118","PortSpecifier":{"PortValue":59118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59118","PortSpecifier":{"PortValue":59118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081808,"nanos":40743246},"http":{"id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/auth-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30eb5f1f-cf24-4ffb-82d5-c783a073317d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44300","PortSpecifier":{"PortValue":44300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44300","PortSpecifier":{"PortValue":44300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081808,"nanos":77556755},"http":{"id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","method":"POST","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/auth-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2afaac87-7d48-4fc0-8939-a8cad72d3085","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59120","PortSpecifier":{"PortValue":59120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59120","PortSpecifier":{"PortValue":59120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081808,"nanos":120202515},"http":{"id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JSSCmmp3kdu4vGbi_GUgVREi6Aon8n95p7hDiw1li5xIkpY6a6oM4DmIDGe7"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JSSCmmp3kdu4vGbi_GUgVREi6Aon8n95p7hDiw1li5xIkpY6a6oM4DmIDGe7\"}"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba3fc26a-c64e-49b7-85be-01d1b23daebe","keyName":"e2e-auth-iso-a-066b49","subscription":"e2e-auth-iso-5e7cfc","tenant":"e2e-shared-a-d81393","userId":"ba3fc26a-c64e-49b7-85be-01d1b23daebe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/auth-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5e7cfc"}
{"level":"info","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:03:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c6e1d83-bcbc-46f6-a17a-e577e083a7e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de5e6704a6b45f0f3040c7fa12ec4fac70e9bd0cd3577a8f50982273d89e1e61"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/122b94be15ec5620d03b9d101373d761bb747cba26542aaca5f4e2fd8349ee9e"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d38d0878c692c10ec714ec285317d76891b8e87c8ef67a04b6a7d6100111ef1"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9417917d0deaa50dd4806806eeebf9b39d8f33ec8593906b73f41a772af5b38b"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d888867a4dd4fff7ef09bfe944c79b3c0bc3accea91c70bba851285554a977b"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c9e1dd10e519e94418fd87f7d5c70d73718f09938d13169dfcc88786dc48c9c"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94fcf770ee859cbae381127216fa0d08b3447b8dd84b84b9d807303ec5d41f2f"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a57f289bf9f4ae79d58614dabc71e880fe50f636801c1a0fd33209b27c84e6"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f4672b4b7565fca682294efed72efcf67c962110112355db1947952fe7617e6"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61a4942719dd6e1104539fe854233e1e759fbe4731153523d5fe240ddfa56b92"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bce2cf5f23a4189df483c7d707060adf7f991b6d0a2512d80425a8cb18f65cf2"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd6da70c890230f22f41796afbc7d6d75e94eba31c501cacd96ec7b645d9e5ff"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e410d3de4f22e68d3a4a2413727325efc3a35f54acfa58a452c6ec0e576817a"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d3df0946faf039a42b3197a8973e34a3b942b5026b5d5f8360f14427bb44098"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0f61a2cd970496b614141aa70e29129e970c17597fb0fec85ac3695affa515c"}
{"level":"info","ts":"2026-07-26T16:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3c9c8f294eb25fa4befff52bdbd778b70b9dd150518d0073b1cfe76e3c9fe32"}
{"level":"debug","ts":"2026-07-26T16:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-26T16:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0896433efb7f2723a366b31ac8121e3ca8391317df8335f945a0fc9ae540044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0896433efb7f2723a366b31ac8121e3ca8391317df8335f945a0fc9ae540044","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0896433efb7f2723a366b31ac8121e3ca8391317df8335f945a0fc9ae540044"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0896433efb7f2723a366b31ac8121e3ca8391317df8335f945a0fc9ae540044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0896433efb7f2723a366b31ac8121e3ca8391317df8335f945a0fc9ae540044"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0896433efb7f2723a366b31ac8121e3ca8391317df8335f945a0fc9ae540044","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0896433efb7f2723a366b31ac8121e3ca8391317df8335f945a0fc9ae540044"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0896433efb7f2723a366b31ac8121e3ca8391317df8335f945a0fc9ae540044","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab50da4432259d967e2d443d548577846f81d94a096d23f11ca011c37edb3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab50da4432259d967e2d443d548577846f81d94a096d23f11ca011c37edb3eb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab50da4432259d967e2d443d548577846f81d94a096d23f11ca011c37edb3eb8"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab50da4432259d967e2d443d548577846f81d94a096d23f11ca011c37edb3eb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab50da4432259d967e2d443d548577846f81d94a096d23f11ca011c37edb3eb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab50da4432259d967e2d443d548577846f81d94a096d23f11ca011c37edb3eb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab50da4432259d967e2d443d548577846f81d94a096d23f11ca011c37edb3eb8"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab50da4432259d967e2d443d548577846f81d94a096d23f11ca011c37edb3eb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f3cc0a6c9b8048c12e1a863dc8293737942c20394611760a5a9736059d29b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f3cc0a6c9b8048c12e1a863dc8293737942c20394611760a5a9736059d29b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f3cc0a6c9b8048c12e1a863dc8293737942c20394611760a5a9736059d29b75"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f3cc0a6c9b8048c12e1a863dc8293737942c20394611760a5a9736059d29b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f3cc0a6c9b8048c12e1a863dc8293737942c20394611760a5a9736059d29b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4dffb1825200013347c32ea36e6184edb7fc21166fe4c919de27b1888b3c99"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f3cc0a6c9b8048c12e1a863dc8293737942c20394611760a5a9736059d29b75"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f3cc0a6c9b8048c12e1a863dc8293737942c20394611760a5a9736059d29b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4dffb1825200013347c32ea36e6184edb7fc21166fe4c919de27b1888b3c99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4dffb1825200013347c32ea36e6184edb7fc21166fe4c919de27b1888b3c99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4dffb1825200013347c32ea36e6184edb7fc21166fe4c919de27b1888b3c99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acfef5b219a70024b2baac0cdac23479460f240d1bb853aa3329427d2b258fe"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4205173fcf75634975c05669a9e97f2c4306c259e4db30545c7a1e95d944e3de"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8836728bcd0d3a305be34c37ca2d9a6977f8f4775e6125b56f91baf9d3251e09"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f3cc0a6c9b8048c12e1a863dc8293737942c20394611760a5a9736059d29b75"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acfef5b219a70024b2baac0cdac23479460f240d1bb853aa3329427d2b258fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acfef5b219a70024b2baac0cdac23479460f240d1bb853aa3329427d2b258fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4dffb1825200013347c32ea36e6184edb7fc21166fe4c919de27b1888b3c99"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acfef5b219a70024b2baac0cdac23479460f240d1bb853aa3329427d2b258fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4205173fcf75634975c05669a9e97f2c4306c259e4db30545c7a1e95d944e3de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4205173fcf75634975c05669a9e97f2c4306c259e4db30545c7a1e95d944e3de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acfef5b219a70024b2baac0cdac23479460f240d1bb853aa3329427d2b258fe"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4205173fcf75634975c05669a9e97f2c4306c259e4db30545c7a1e95d944e3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4205173fcf75634975c05669a9e97f2c4306c259e4db30545c7a1e95d944e3de"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8836728bcd0d3a305be34c37ca2d9a6977f8f4775e6125b56f91baf9d3251e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8836728bcd0d3a305be34c37ca2d9a6977f8f4775e6125b56f91baf9d3251e09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8836728bcd0d3a305be34c37ca2d9a6977f8f4775e6125b56f91baf9d3251e09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8836728bcd0d3a305be34c37ca2d9a6977f8f4775e6125b56f91baf9d3251e09"}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f3cc0a6c9b8048c12e1a863dc8293737942c20394611760a5a9736059d29b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4dffb1825200013347c32ea36e6184edb7fc21166fe4c919de27b1888b3c99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acfef5b219a70024b2baac0cdac23479460f240d1bb853aa3329427d2b258fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4205173fcf75634975c05669a9e97f2c4306c259e4db30545c7a1e95d944e3de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8836728bcd0d3a305be34c37ca2d9a6977f8f4775e6125b56f91baf9d3251e09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:04:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:04:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"info","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"660750c2-d45d-4f27-b369-4501f406327d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58276","PortSpecifier":{"PortValue":58276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"660750c2-d45d-4f27-b369-4501f406327d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"660750c2-d45d-4f27-b369-4501f406327d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58276","PortSpecifier":{"PortValue":58276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081892,"nanos":697413208},"http":{"id":"660750c2-d45d-4f27-b369-4501f406327d","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"660750c2-d45d-4f27-b369-4501f406327d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"660750c2-d45d-4f27-b369-4501f406327d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"660750c2-d45d-4f27-b369-4501f406327d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"660750c2-d45d-4f27-b369-4501f406327d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"660750c2-d45d-4f27-b369-4501f406327d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"660750c2-d45d-4f27-b369-4501f406327d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/sub-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"660750c2-d45d-4f27-b369-4501f406327d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"660750c2-d45d-4f27-b369-4501f406327d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"660750c2-d45d-4f27-b369-4501f406327d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"660750c2-d45d-4f27-b369-4501f406327d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"660750c2-d45d-4f27-b369-4501f406327d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56136","PortSpecifier":{"PortValue":56136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e57bf4fe-4d2e-426a-837a-c403c0357614","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56136","PortSpecifier":{"PortValue":56136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081892,"nanos":739757811},"http":{"id":"e57bf4fe-4d2e-426a-837a-c403c0357614","method":"POST","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/sub-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e57bf4fe-4d2e-426a-837a-c403c0357614","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58292","PortSpecifier":{"PortValue":58292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6854cf12-1e84-4d4f-9179-84a82401a847","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58292","PortSpecifier":{"PortValue":58292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081892,"nanos":776106708},"http":{"id":"6854cf12-1e84-4d4f-9179-84a82401a847","method":"GET","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bEv5QpXoY8KyJA5t_qfOCrXCSCPbLULFmaH8DG0bUV8rxikCQJCBpNaELjXJ"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bEv5QpXoY8KyJA5t_qfOCrXCSCPbLULFmaH8DG0bUV8rxikCQJCBpNaELjXJ\"}"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2f79513b-afed-43a0-9f40-ca9bfb857e4b","keyName":"e2e-sub-iso-e88a68","subscription":"e2e-a-only-a4bfb1","tenant":"e2e-shared-a-d81393","userId":"2f79513b-afed-43a0-9f40-ca9bfb857e4b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/sub-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a4bfb1"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6854cf12-1e84-4d4f-9179-84a82401a847","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56140","PortSpecifier":{"PortValue":56140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56140","PortSpecifier":{"PortValue":56140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081892,"nanos":818306048},"http":{"id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","method":"GET","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-doibiCCC09s1M5tx_bKbBM2ag1L0XYeJB5V8W8WyeohBleuZfxLAgxONcQdt"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-976e7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-doibiCCC09s1M5tx_bKbBM2ag1L0XYeJB5V8W8WyeohBleuZfxLAgxONcQdt\"}"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-976e7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0130fe06-d6bb-42c0-97f1-be8dffe05701","keyName":"e2e-sub-iso-aa93e8","subscription":"e2e-b-only-a4bfb1","tenant":"e2e-shared-b-976e7c","userId":"0130fe06-d6bb-42c0-97f1-be8dffe05701","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/sub-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a4bfb1"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f201585f-7a9a-4cbe-900e-d14bfe2c3d52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37568","PortSpecifier":{"PortValue":37568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37568","PortSpecifier":{"PortValue":37568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081913,"nanos":219136225},"http":{"id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/sub-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14959a50-76d6-4cbf-b5fe-61af3b3da021","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe336641-c2e0-4d25-932d-27182e442391","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44366","PortSpecifier":{"PortValue":44366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe336641-c2e0-4d25-932d-27182e442391","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe336641-c2e0-4d25-932d-27182e442391","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44366","PortSpecifier":{"PortValue":44366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081913,"nanos":268680534},"http":{"id":"fe336641-c2e0-4d25-932d-27182e442391","method":"POST","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe336641-c2e0-4d25-932d-27182e442391","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe336641-c2e0-4d25-932d-27182e442391","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe336641-c2e0-4d25-932d-27182e442391","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe336641-c2e0-4d25-932d-27182e442391","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe336641-c2e0-4d25-932d-27182e442391","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe336641-c2e0-4d25-932d-27182e442391","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/sub-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe336641-c2e0-4d25-932d-27182e442391","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe336641-c2e0-4d25-932d-27182e442391","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe336641-c2e0-4d25-932d-27182e442391","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe336641-c2e0-4d25-932d-27182e442391","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe336641-c2e0-4d25-932d-27182e442391","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37580","PortSpecifier":{"PortValue":37580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37580","PortSpecifier":{"PortValue":37580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081913,"nanos":314114283},"http":{"id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10Brz90bUEdR4Oxdi_whlwpZpVkZGcysJXDfd7eL6UkNWQK995YaUm2yflr4o"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10Brz90bUEdR4Oxdi_whlwpZpVkZGcysJXDfd7eL6UkNWQK995YaUm2yflr4o\"}"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8ee13fec-66e4-4a69-81da-dc3ff27f70f3","keyName":"e2e-sub-iso-9a6e8d","subscription":"e2e-shared-sub-87fdba","tenant":"e2e-shared-a-d81393","userId":"8ee13fec-66e4-4a69-81da-dc3ff27f70f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/sub-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-87fdba"}
{"level":"info","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bffd7d4-459a-4d19-a88e-73d631a6367d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44380","PortSpecifier":{"PortValue":44380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c701ceb-c112-480e-879a-e639c7a0f4da","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44380","PortSpecifier":{"PortValue":44380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081913,"nanos":349589529},"http":{"id":"0c701ceb-c112-480e-879a-e639c7a0f4da","method":"POST","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MsDJuzbK9jN7xf0A_gLdO7D78UCQcR0DPHQm5m4jYPKoxCrGkFCUtET27NL2"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-976e7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MsDJuzbK9jN7xf0A_gLdO7D78UCQcR0DPHQm5m4jYPKoxCrGkFCUtET27NL2\"}"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-976e7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"57d6cf99-4fa0-4729-b8a0-b58f252ca92d","keyName":"e2e-sub-iso-58b61f","subscription":"e2e-shared-sub-87fdba","tenant":"e2e-shared-b-976e7c","userId":"57d6cf99-4fa0-4729-b8a0-b58f252ca92d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/sub-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-87fdba"}
{"level":"info","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:05:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c701ceb-c112-480e-879a-e639c7a0f4da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c4dffb1825200013347c32ea36e6184edb7fc21166fe4c919de27b1888b3c99"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5acfef5b219a70024b2baac0cdac23479460f240d1bb853aa3329427d2b258fe"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4205173fcf75634975c05669a9e97f2c4306c259e4db30545c7a1e95d944e3de"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6532a1e59862ed9c1069fd53b3ab624058cbe23b3fa4115d5f6fb0391e201828"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7b89c5a7980a3cd61db6b7dcdbe9b1686ac74f4539a5a214337b0522dbf8174"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bc7992bb942860e2d7f835e63ef85507f86d9f6ae69c8574ea16b0c7f6c6fe0"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f6ab371c0bf7d33c6de572dd3efec15fa4c57d056c277e2acbe214f8c98e713"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f3cc0a6c9b8048c12e1a863dc8293737942c20394611760a5a9736059d29b75"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0896433efb7f2723a366b31ac8121e3ca8391317df8335f945a0fc9ae540044"}
{"level":"info","ts":"2026-07-26T16:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab50da4432259d967e2d443d548577846f81d94a096d23f11ca011c37edb3eb8"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e7b4ecac2a67c79b53adf6a90eddabcb633bb276965f97f8451e6b7c264ec4e"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33ddd94a44f822d03bb2e858aa2d455ca26ffb56623e6ca921df17488b44ec42"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a45b8a6397eeca69f634e4bd3906ca6aea78adc5dbabe864ea6ba69e85dbf241"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ce16d15b0f2f7490432632f1af6b1d433ee5c6a1af5d16834953a292abb9b34"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8836728bcd0d3a305be34c37ca2d9a6977f8f4775e6125b56f91baf9d3251e09"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/110eb58c181579723c462f3005dc12409021feb43a37a212c07ee63a8ec2b5e9"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"info","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"error","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"}
{"level":"error","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"error","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"}
{"level":"error","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839"}
{"level":"error","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"debug","ts":"2026-07-26T16:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8f41011c0f9f85b8a6285bbe222fb6c976d0925835f2164f0d7fd0523b4e052","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8f41011c0f9f85b8a6285bbe222fb6c976d0925835f2164f0d7fd0523b4e052","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d83d079f07d29c9fda77c5954f529334d85cdd4cb1eccd961ce15386745db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8f41011c0f9f85b8a6285bbe222fb6c976d0925835f2164f0d7fd0523b4e052"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d83d079f07d29c9fda77c5954f529334d85cdd4cb1eccd961ce15386745db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8f41011c0f9f85b8a6285bbe222fb6c976d0925835f2164f0d7fd0523b4e052","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8f41011c0f9f85b8a6285bbe222fb6c976d0925835f2164f0d7fd0523b4e052"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8f41011c0f9f85b8a6285bbe222fb6c976d0925835f2164f0d7fd0523b4e052","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31bad26c51646ac46931a007d37630dbf6429580da5c1ad0e499cf4c4e88aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d83d079f07d29c9fda77c5954f529334d85cdd4cb1eccd961ce15386745db2"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31bad26c51646ac46931a007d37630dbf6429580da5c1ad0e499cf4c4e88aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d83d079f07d29c9fda77c5954f529334d85cdd4cb1eccd961ce15386745db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3d83d079f07d29c9fda77c5954f529334d85cdd4cb1eccd961ce15386745db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31bad26c51646ac46931a007d37630dbf6429580da5c1ad0e499cf4c4e88aff"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d83d079f07d29c9fda77c5954f529334d85cdd4cb1eccd961ce15386745db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8f41011c0f9f85b8a6285bbe222fb6c976d0925835f2164f0d7fd0523b4e052","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f31bad26c51646ac46931a007d37630dbf6429580da5c1ad0e499cf4c4e88aff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f31bad26c51646ac46931a007d37630dbf6429580da5c1ad0e499cf4c4e88aff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8f41011c0f9f85b8a6285bbe222fb6c976d0925835f2164f0d7fd0523b4e052"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d83d079f07d29c9fda77c5954f529334d85cdd4cb1eccd961ce15386745db2"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f31bad26c51646ac46931a007d37630dbf6429580da5c1ad0e499cf4c4e88aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d83d079f07d29c9fda77c5954f529334d85cdd4cb1eccd961ce15386745db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31bad26c51646ac46931a007d37630dbf6429580da5c1ad0e499cf4c4e88aff"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d0d1faa99d0bf7cb1f348f9cec76741e2ed484bc68305cdda4b2f18fea9d4b"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f14af06b1f51d61317007f1f5a3e94016bef54151b5c638f5fbb216f695b5f8"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85d0d1faa99d0bf7cb1f348f9cec76741e2ed484bc68305cdda4b2f18fea9d4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85d0d1faa99d0bf7cb1f348f9cec76741e2ed484bc68305cdda4b2f18fea9d4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f31bad26c51646ac46931a007d37630dbf6429580da5c1ad0e499cf4c4e88aff"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85d0d1faa99d0bf7cb1f348f9cec76741e2ed484bc68305cdda4b2f18fea9d4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f14af06b1f51d61317007f1f5a3e94016bef54151b5c638f5fbb216f695b5f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f14af06b1f51d61317007f1f5a3e94016bef54151b5c638f5fbb216f695b5f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b224b85e0ca24ecc3e235cc0c48fa726f0a9242a35c04686c92181118335b643"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f14af06b1f51d61317007f1f5a3e94016bef54151b5c638f5fbb216f695b5f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f31bad26c51646ac46931a007d37630dbf6429580da5c1ad0e499cf4c4e88aff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c24c0c4805ae40b073e0a9003afbf9d074dff07e149c9aa7c9fc612badca79"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85d0d1faa99d0bf7cb1f348f9cec76741e2ed484bc68305cdda4b2f18fea9d4b"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50c09bdb25f41b2812b75e93c8e58b545974fb441aa47042da99bf9e0e3d5e15"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b224b85e0ca24ecc3e235cc0c48fa726f0a9242a35c04686c92181118335b643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b224b85e0ca24ecc3e235cc0c48fa726f0a9242a35c04686c92181118335b643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f14af06b1f51d61317007f1f5a3e94016bef54151b5c638f5fbb216f695b5f8"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b224b85e0ca24ecc3e235cc0c48fa726f0a9242a35c04686c92181118335b643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c24c0c4805ae40b073e0a9003afbf9d074dff07e149c9aa7c9fc612badca79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c24c0c4805ae40b073e0a9003afbf9d074dff07e149c9aa7c9fc612badca79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b224b85e0ca24ecc3e235cc0c48fa726f0a9242a35c04686c92181118335b643"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c24c0c4805ae40b073e0a9003afbf9d074dff07e149c9aa7c9fc612badca79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c24c0c4805ae40b073e0a9003afbf9d074dff07e149c9aa7c9fc612badca79"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85d0d1faa99d0bf7cb1f348f9cec76741e2ed484bc68305cdda4b2f18fea9d4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50c09bdb25f41b2812b75e93c8e58b545974fb441aa47042da99bf9e0e3d5e15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50c09bdb25f41b2812b75e93c8e58b545974fb441aa47042da99bf9e0e3d5e15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50c09bdb25f41b2812b75e93c8e58b545974fb441aa47042da99bf9e0e3d5e15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc"}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50c09bdb25f41b2812b75e93c8e58b545974fb441aa47042da99bf9e0e3d5e15"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f14af06b1f51d61317007f1f5a3e94016bef54151b5c638f5fbb216f695b5f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b224b85e0ca24ecc3e235cc0c48fa726f0a9242a35c04686c92181118335b643","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c24c0c4805ae40b073e0a9003afbf9d074dff07e149c9aa7c9fc612badca79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50c09bdb25f41b2812b75e93c8e58b545974fb441aa47042da99bf9e0e3d5e15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:06:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"}
{"level":"error","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76a15b79-b2c2-4405-bb21-645257716702","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60388","PortSpecifier":{"PortValue":60388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76a15b79-b2c2-4405-bb21-645257716702","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76a15b79-b2c2-4405-bb21-645257716702","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60388","PortSpecifier":{"PortValue":60388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082002,"nanos":547760388},"http":{"id":"76a15b79-b2c2-4405-bb21-645257716702","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76a15b79-b2c2-4405-bb21-645257716702","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76a15b79-b2c2-4405-bb21-645257716702","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76a15b79-b2c2-4405-bb21-645257716702","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76a15b79-b2c2-4405-bb21-645257716702","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76a15b79-b2c2-4405-bb21-645257716702","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76a15b79-b2c2-4405-bb21-645257716702","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76a15b79-b2c2-4405-bb21-645257716702","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76a15b79-b2c2-4405-bb21-645257716702","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76a15b79-b2c2-4405-bb21-645257716702","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76a15b79-b2c2-4405-bb21-645257716702","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76a15b79-b2c2-4405-bb21-645257716702","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32870","PortSpecifier":{"PortValue":32870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:32870","PortSpecifier":{"PortValue":32870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082002,"nanos":596055678},"http":{"id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","method":"POST","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/rate-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e31eca5e-55ea-428b-bdc6-62b2c6285ecf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60394","PortSpecifier":{"PortValue":60394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60394","PortSpecifier":{"PortValue":60394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082002,"nanos":641116742},"http":{"id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eveopJAOQSozgdir_NHeYC4MOnkhGjgfc8BGNVcd9SQXIMF6udMo2wOFVe27"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eveopJAOQSozgdir_NHeYC4MOnkhGjgfc8BGNVcd9SQXIMF6udMo2wOFVe27\"}"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a79fb3b6-c8a7-420b-98b2-2809e7b5a556","keyName":"e2e-rate-a-7b995c","subscription":"e2e-rate-iso-a-7b995c","tenant":"e2e-shared-a-d81393","userId":"a79fb3b6-c8a7-420b-98b2-2809e7b5a556","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7b995c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7b995c","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7b995c"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a79fb3b6-c8a7-420b-98b2-2809e7b5a556","keyName":"e2e-rate-a-7b995c","selected_subscription":"e2e-rate-iso-a-7b995c","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7b995c@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7b995c","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50260328-2516-4f69-a7b3-bde2f8ed39cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60408","PortSpecifier":{"PortValue":60408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51078b86-c63d-4bc6-8183-6de725057ba3","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60408","PortSpecifier":{"PortValue":60408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082003,"nanos":733092665},"http":{"id":"51078b86-c63d-4bc6-8183-6de725057ba3","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eveopJAOQSozgdir_NHeYC4MOnkhGjgfc8BGNVcd9SQXIMF6udMo2wOFVe27"}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eveopJAOQSozgdir_NHeYC4MOnkhGjgfc8BGNVcd9SQXIMF6udMo2wOFVe27\"}"}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a79fb3b6-c8a7-420b-98b2-2809e7b5a556","keyName":"e2e-rate-a-7b995c","subscription":"e2e-rate-iso-a-7b995c","tenant":"e2e-shared-a-d81393","userId":"a79fb3b6-c8a7-420b-98b2-2809e7b5a556","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7b995c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7b995c","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7b995c"}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a79fb3b6-c8a7-420b-98b2-2809e7b5a556","keyName":"e2e-rate-a-7b995c","selected_subscription":"e2e-rate-iso-a-7b995c","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7b995c@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7b995c","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:06:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51078b86-c63d-4bc6-8183-6de725057ba3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60414","PortSpecifier":{"PortValue":60414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60414","PortSpecifier":{"PortValue":60414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082004,"nanos":774924853},"http":{"id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eveopJAOQSozgdir_NHeYC4MOnkhGjgfc8BGNVcd9SQXIMF6udMo2wOFVe27"}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eveopJAOQSozgdir_NHeYC4MOnkhGjgfc8BGNVcd9SQXIMF6udMo2wOFVe27\"}"}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a79fb3b6-c8a7-420b-98b2-2809e7b5a556","keyName":"e2e-rate-a-7b995c","subscription":"e2e-rate-iso-a-7b995c","tenant":"e2e-shared-a-d81393","userId":"a79fb3b6-c8a7-420b-98b2-2809e7b5a556","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7b995c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7b995c","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7b995c"}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a79fb3b6-c8a7-420b-98b2-2809e7b5a556","keyName":"e2e-rate-a-7b995c","selected_subscription":"e2e-rate-iso-a-7b995c","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7b995c@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7b995c","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:06:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17149d2b-acef-4ca7-a112-fb78a5325d2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44562","PortSpecifier":{"PortValue":44562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44562","PortSpecifier":{"PortValue":44562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082024,"nanos":114650938},"http":{"id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"011041d7-a73b-4d70-9fc3-1e4e87f27337","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cae659a9-654a-4095-9936-d6e199661bed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36668","PortSpecifier":{"PortValue":36668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cae659a9-654a-4095-9936-d6e199661bed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cae659a9-654a-4095-9936-d6e199661bed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36668","PortSpecifier":{"PortValue":36668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082024,"nanos":149899400},"http":{"id":"cae659a9-654a-4095-9936-d6e199661bed","method":"POST","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cae659a9-654a-4095-9936-d6e199661bed","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cae659a9-654a-4095-9936-d6e199661bed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cae659a9-654a-4095-9936-d6e199661bed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae659a9-654a-4095-9936-d6e199661bed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae659a9-654a-4095-9936-d6e199661bed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae659a9-654a-4095-9936-d6e199661bed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/rate-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cae659a9-654a-4095-9936-d6e199661bed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cae659a9-654a-4095-9936-d6e199661bed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cae659a9-654a-4095-9936-d6e199661bed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cae659a9-654a-4095-9936-d6e199661bed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cae659a9-654a-4095-9936-d6e199661bed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44572","PortSpecifier":{"PortValue":44572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b594ff8-3b44-4408-b549-a0deefa4b705","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44572","PortSpecifier":{"PortValue":44572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082024,"nanos":189539956},"http":{"id":"2b594ff8-3b44-4408-b549-a0deefa4b705","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD\"}"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","subscription":"e2e-rate-iso-a-7eed15","tenant":"e2e-shared-a-d81393","userId":"009634f3-88a5-4a9b-8eed-310240a50a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7eed15\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7eed15"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","selected_subscription":"e2e-rate-iso-a-7eed15","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7eed15@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b594ff8-3b44-4408-b549-a0deefa4b705","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44580","PortSpecifier":{"PortValue":44580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44580","PortSpecifier":{"PortValue":44580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082025,"nanos":228309048},"http":{"id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD"}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD\"}"}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","subscription":"e2e-rate-iso-a-7eed15","tenant":"e2e-shared-a-d81393","userId":"009634f3-88a5-4a9b-8eed-310240a50a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7eed15\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7eed15"}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","selected_subscription":"e2e-rate-iso-a-7eed15","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7eed15@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"862e2f34-4c7b-4db0-9f04-0faa6ccc3fae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef532837-0443-42d1-9f46-cf8728070749","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44584","PortSpecifier":{"PortValue":44584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef532837-0443-42d1-9f46-cf8728070749","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef532837-0443-42d1-9f46-cf8728070749","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44584","PortSpecifier":{"PortValue":44584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082026,"nanos":273779607},"http":{"id":"ef532837-0443-42d1-9f46-cf8728070749","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD"}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD\"}"}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","subscription":"e2e-rate-iso-a-7eed15","tenant":"e2e-shared-a-d81393","userId":"009634f3-88a5-4a9b-8eed-310240a50a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7eed15\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef532837-0443-42d1-9f46-cf8728070749","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7eed15"}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef532837-0443-42d1-9f46-cf8728070749","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","selected_subscription":"e2e-rate-iso-a-7eed15","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7eed15@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef532837-0443-42d1-9f46-cf8728070749","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef532837-0443-42d1-9f46-cf8728070749","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44586","PortSpecifier":{"PortValue":44586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44586","PortSpecifier":{"PortValue":44586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082027,"nanos":311736667},"http":{"id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD"}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD\"}"}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","subscription":"e2e-rate-iso-a-7eed15","tenant":"e2e-shared-a-d81393","userId":"009634f3-88a5-4a9b-8eed-310240a50a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7eed15\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7eed15"}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","selected_subscription":"e2e-rate-iso-a-7eed15","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7eed15@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca72cb72-9e6b-4d00-9d35-9cdf11a68ec2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59498","PortSpecifier":{"PortValue":59498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59498","PortSpecifier":{"PortValue":59498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082028,"nanos":356669549},"http":{"id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD"}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD\"}"}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","subscription":"e2e-rate-iso-a-7eed15","tenant":"e2e-shared-a-d81393","userId":"009634f3-88a5-4a9b-8eed-310240a50a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7eed15\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7eed15"}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","selected_subscription":"e2e-rate-iso-a-7eed15","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7eed15@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8e56c9b-811e-4b58-992a-8f7bf6c185a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59500","PortSpecifier":{"PortValue":59500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59500","PortSpecifier":{"PortValue":59500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082029,"nanos":396016032},"http":{"id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD"}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD\"}"}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","subscription":"e2e-rate-iso-a-7eed15","tenant":"e2e-shared-a-d81393","userId":"009634f3-88a5-4a9b-8eed-310240a50a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7eed15\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7eed15"}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","selected_subscription":"e2e-rate-iso-a-7eed15","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7eed15@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5dc2d2d-493c-4ca6-9f11-4cb0ab122495","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59512","PortSpecifier":{"PortValue":59512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b64a1896-e653-493f-97a5-c5ebb90d9074","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59512","PortSpecifier":{"PortValue":59512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082030,"nanos":439371654},"http":{"id":"b64a1896-e653-493f-97a5-c5ebb90d9074","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD"}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD\"}"}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","subscription":"e2e-rate-iso-a-7eed15","tenant":"e2e-shared-a-d81393","userId":"009634f3-88a5-4a9b-8eed-310240a50a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7eed15\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7eed15"}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","selected_subscription":"e2e-rate-iso-a-7eed15","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7eed15@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b64a1896-e653-493f-97a5-c5ebb90d9074","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59518","PortSpecifier":{"PortValue":59518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","method":"POST","path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions","host":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59518","PortSpecifier":{"PortValue":59518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082031,"nanos":477835493},"http":{"id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","method":"POST","headers":{":authority":"e2e-shared-a-d81393.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aXkVaZy6q7V3MnfR_a3ghDjWWwxuc1uSBFwzVKtizXZLhwqJlPfxI1NAsYtD\"}"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","subscription":"e2e-rate-iso-a-7eed15","tenant":"e2e-shared-a-d81393","userId":"009634f3-88a5-4a9b-8eed-310240a50a08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\",\"requestedSubscription\":\"e2e-rate-iso-a-7eed15\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d81393.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7eed15"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"009634f3-88a5-4a9b-8eed-310240a50a08","keyName":"e2e-rate-a-7eed15","selected_subscription":"e2e-rate-iso-a-7eed15","selected_subscription_key":"ai-tenant-e2e-shared-a-d81393/e2e-rate-iso-a-7eed15@ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-d81393/models/facebook/opt-125m","name":"rate-test-model-d81393","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7eed15","namespace":"ai-tenant-e2e-shared-a-d81393","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d81393/rate-test-model-d81393"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ee6555f-d1df-42bf-bda9-605089aa5d17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36828","PortSpecifier":{"PortValue":36828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af494a16-bb23-4551-a019-116b93b8bc1c","method":"POST","path":"/ai-tenant-e2e-shared-b-976e7c/rate-test-model-976e7c/v1/completions","host":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36828","PortSpecifier":{"PortValue":36828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082031,"nanos":516226905},"http":{"id":"af494a16-bb23-4551-a019-116b93b8bc1c","method":"POST","headers":{":authority":"e2e-shared-b-976e7c.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-976e7c/rate-test-model-976e7c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1c0ZghEeTJ3vxNMJA_F0lwiKAAVFj9z6ZTw29sQDE8M8KKKqsQX2dmLc0E7J0"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-976e7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1c0ZghEeTJ3vxNMJA_F0lwiKAAVFj9z6ZTw29sQDE8M8KKKqsQX2dmLc0E7J0\"}"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-976e7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9e0ce2f4-dfdb-4e3c-ae78-faf5635d29ec","keyName":"e2e-rate-b-7eed15","subscription":"e2e-rate-iso-b-7eed15","tenant":"e2e-shared-b-976e7c","userId":"9e0ce2f4-dfdb-4e3c-ae78-faf5635d29ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-976e7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-976e7c/rate-test-model-976e7c\",\"requestedSubscription\":\"e2e-rate-iso-b-7eed15\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-976e7c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m","name":"rate-test-model-976e7c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7eed15","namespace":"ai-tenant-e2e-shared-b-976e7c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-976e7c/rate-test-model-976e7c"}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-976e7c/rate-test-model-976e7c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7eed15"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9e0ce2f4-dfdb-4e3c-ae78-faf5635d29ec","keyName":"e2e-rate-b-7eed15","selected_subscription":"e2e-rate-iso-b-7eed15","selected_subscription_key":"ai-tenant-e2e-shared-b-976e7c/e2e-rate-iso-b-7eed15@ai-tenant-e2e-shared-b-976e7c/rate-test-model-976e7c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-976e7c/models/facebook/opt-125m","name":"rate-test-model-976e7c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7eed15","namespace":"ai-tenant-e2e-shared-b-976e7c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-976e7c/rate-test-model-976e7c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af494a16-bb23-4551-a019-116b93b8bc1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:07:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e0e7fef231a272860d16dd290f70f1d1289fd1db064a0f29b2d14ab75ae0fe4"}
{"level":"info","ts":"2026-07-26T16:07:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f31bad26c51646ac46931a007d37630dbf6429580da5c1ad0e499cf4c4e88aff"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73481033bcbd7710b9f81479f6ebeb7176912b00b12128149c1db2a57295f345"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8f41011c0f9f85b8a6285bbe222fb6c976d0925835f2164f0d7fd0523b4e052"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/010261b45c4057721fd843972b95f7c6e9c0a5a68d5f84fa0e9477c270ead839"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b224b85e0ca24ecc3e235cc0c48fa726f0a9242a35c04686c92181118335b643"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f80447107c655bf40fc1bf48e3b3a96535b02cc519acc8837d39175314d63e1"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d754d3b4129531aa9e8e417f2e126d272d3c6dd0cca95b1fc57d22bd007fcd6"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecb6820d68a68bc188fe70854a78bfb3b52fdc0eb0b7fd8898674b73a719e5cf"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cb27d1b84041c0adaec7f42f2fce6a8fbe76eb742bbd29cb32f7ec1953355ed"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b93045c67bd076b073d0bedc0721494e844e42a55cdfcb39a5941940794863d"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57c24c0c4805ae40b073e0a9003afbf9d074dff07e149c9aa7c9fc612badca79"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a480e5fb3bb0f3c26295f6ceed3b3a1042bc97eb2849fbbbe4fdc064b5024f14"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33babc8d9f6fe163dd29f8f05faf746b1048c1e3b3563badd206593b4f963895"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3d83d079f07d29c9fda77c5954f529334d85cdd4cb1eccd961ce15386745db2"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d50e78866bf9701f61cc10eb3ba66bf097c4517b4b2cf6aef1fea907b32fbdc"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50c09bdb25f41b2812b75e93c8e58b545974fb441aa47042da99bf9e0e3d5e15"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b36249405b44b1af6f53d295dc4988f39ebdfc1716603866c36990b6ff0fc68c"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13000b07517f0ac049008aae056e3f077c7bec15bad76f31b365d645bac3f193"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85d0d1faa99d0bf7cb1f348f9cec76741e2ed484bc68305cdda4b2f18fea9d4b"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6972417d557b8c81556b58090dfd2468bfb68d7ffa06ae62baf179e0a2d6361b"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d3a96c10458d2c7c0cbc775fcc95015bf3db8473b0d462892be7a00cc09666b"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f14af06b1f51d61317007f1f5a3e94016bef54151b5c638f5fbb216f695b5f8"}
{"level":"info","ts":"2026-07-26T16:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0d4f2d17e7e2d3e3f3d8e8529b68f8ff418c32452eb1113a2fa873d3f0dda03"}
{"level":"info","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"884971f7-120e-45f4-b434-b449e396518e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43706","PortSpecifier":{"PortValue":43706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"884971f7-120e-45f4-b434-b449e396518e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"884971f7-120e-45f4-b434-b449e396518e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43706","PortSpecifier":{"PortValue":43706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082105,"nanos":629329263},"http":{"id":"884971f7-120e-45f4-b434-b449e396518e","method":"POST","headers":{":authority":"maas.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"884971f7-120e-45f4-b434-b449e396518e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"884971f7-120e-45f4-b434-b449e396518e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"884971f7-120e-45f4-b434-b449e396518e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"884971f7-120e-45f4-b434-b449e396518e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"884971f7-120e-45f4-b434-b449e396518e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"884971f7-120e-45f4-b434-b449e396518e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"884971f7-120e-45f4-b434-b449e396518e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"884971f7-120e-45f4-b434-b449e396518e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"884971f7-120e-45f4-b434-b449e396518e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"884971f7-120e-45f4-b434-b449e396518e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"884971f7-120e-45f4-b434-b449e396518e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4868503-1879-492a-88ee-677e8b1899d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43712","PortSpecifier":{"PortValue":43712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4868503-1879-492a-88ee-677e8b1899d2","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4868503-1879-492a-88ee-677e8b1899d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43712","PortSpecifier":{"PortValue":43712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082105,"nanos":704139578},"http":{"id":"f4868503-1879-492a-88ee-677e8b1899d2","method":"POST","headers":{":authority":"maas.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fr4U4TGLsnzGZxRm_ayYGJjp60GaIhCQ77sLBj3PEQcBhE5cND0pyb7zxA3V"}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fr4U4TGLsnzGZxRm_ayYGJjp60GaIhCQ77sLBj3PEQcBhE5cND0pyb7zxA3V\"}"}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"974b4cd3-30d8-4a0c-9d3a-5a938977aff1","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"974b4cd3-30d8-4a0c-9d3a-5a938977aff1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4868503-1879-492a-88ee-677e8b1899d2","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4868503-1879-492a-88ee-677e8b1899d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"974b4cd3-30d8-4a0c-9d3a-5a938977aff1","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4868503-1879-492a-88ee-677e8b1899d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:08:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4868503-1879-492a-88ee-677e8b1899d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574"}
{"level":"info","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574"}
{"level":"info","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574"}
{"level":"debug","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669"}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195"}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669"}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012"}
{"level":"error","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012"}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960539b676ef60ce78ee569e66c2dbec9cb7ba39709d432f2c3114823b5f81e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960539b676ef60ce78ee569e66c2dbec9cb7ba39709d432f2c3114823b5f81e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960539b676ef60ce78ee569e66c2dbec9cb7ba39709d432f2c3114823b5f81e1"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"960539b676ef60ce78ee569e66c2dbec9cb7ba39709d432f2c3114823b5f81e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["960539b676ef60ce78ee569e66c2dbec9cb7ba39709d432f2c3114823b5f81e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"960539b676ef60ce78ee569e66c2dbec9cb7ba39709d432f2c3114823b5f81e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/960539b676ef60ce78ee569e66c2dbec9cb7ba39709d432f2c3114823b5f81e1"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"960539b676ef60ce78ee569e66c2dbec9cb7ba39709d432f2c3114823b5f81e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T16:08:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-26T16:08:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"}
{"level":"info","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43192","PortSpecifier":{"PortValue":43192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-9a599d.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43192","PortSpecifier":{"PortValue":43192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082148,"nanos":735645820},"http":{"id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","method":"POST","headers":{":authority":"e2e-ipp-a-9a599d.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"]}}
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23181f60c612"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=42e7b5fd-3242-4651-9a67-93d82a80e164"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f7ab8b7e-5413-4027-bb15-2c8b1490ce64","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-9a599d.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-9a599d/ipp-route-9a599d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-9a599d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:09:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e5a861d-519c-4507-9cb0-47cb6a416d61","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43206","PortSpecifier":{"PortValue":43206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","method":"POST","path":"/ai-tenant-e2e-ipp-a-9a599d/ipp-route-9a599d/v1/chat/completions","host":"e2e-ipp-a-9a599d.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43206","PortSpecifier":{"PortValue":43206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785082150,"nanos":802486116},"http":{"id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","method":"POST","headers":{":authority":"e2e-ipp-a-9a599d.apps.7cd49b1d-f058-4cbd-8937-23181f60c612.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-9a599d/ipp-route-9a599d/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PXQXCOzJsjkElzyq_edmLI2MUmEdHMYDKUhWLDmSCKxcxu0r1gTPsfQk25Sv"}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-9a599d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PXQXCOzJsjkElzyq_edmLI2MUmEdHMYDKUhWLDmSCKxcxu0r1gTPsfQk25Sv\"}"}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-9a599d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8bcaee48-1a81-4eb0-b4f3-ee5f27f9b4ab","keyName":"e2e-ipp-9a599d","subscription":"ipp-route-9a599d-sub","tenant":"e2e-ipp-a-9a599d","userId":"8bcaee48-1a81-4eb0-b4f3-ee5f27f9b4ab","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-9a599d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-9a599d/ipp-route-9a599d\",\"requestedSubscription\":\"ipp-route-9a599d-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-9a599d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-9a599d/models/facebook/opt-125m","name":"ipp-route-9a599d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-9a599d-sub","namespace":"ai-tenant-e2e-ipp-a-9a599d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-9a599d/ipp-route-9a599d"}}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-9a599d/ipp-route-9a599d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-9a599d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-9a599d-sub"}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8bcaee48-1a81-4eb0-b4f3-ee5f27f9b4ab","keyName":"e2e-ipp-9a599d","selected_subscription":"ipp-route-9a599d-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-9a599d/ipp-route-9a599d-sub@ai-tenant-e2e-ipp-a-9a599d/ipp-route-9a599d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-9a599d/models/facebook/opt-125m","name":"ipp-route-9a599d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-9a599d-sub","namespace":"ai-tenant-e2e-ipp-a-9a599d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-9a599d/ipp-route-9a599d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-26T16:09:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ba14f82-a555-46fb-86c0-ea8d5950c4a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/960539b676ef60ce78ee569e66c2dbec9cb7ba39709d432f2c3114823b5f81e1"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a9619e235478b32f5841cbeb463310a867cc2cb087a05fdbe95be3d6f1f1012"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9e9b705f33aa5e1c7da4a4e8ecdb3194a2f668e729f11dc4734184fe739d0e2"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93c88c17268f5912ff1301f9df866e896c0317754e7c94fc69a9853c116e1574"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/905d08490629988649569abe06b6fc30d9566c92a73c39b809ad1f9fbdd83bfb"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09fa5f298a1a4962e678c8d5dcdae6cc7464f298d7f423ef614cf1db2f779195"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3541c0a9facfa436d680c79f35d74a95749432724564041fb131b9927315da43"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/049b9d1fb5f44f8fa9b5be4f55107fd1e25bb8e0c7644d1e926fcf8abbc6b669"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56352cc51fa2e2b893b94f2a9159e489472d8745626fdda9efacf93e3023da99"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/906b6f9b4f15e780272c9aac326ef872186e1eb91b03a0d50ad9b607a5e67097"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f13fa318fea6209671adedb4ada2d67cadb891aa5edb809d87458b490b4ca63c"}
{"level":"info","ts":"2026-07-26T16:10:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a9a290f00329cde221c4623f67e799e4c97e6574b5020ccfac2eb24728d7858"}