--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"}
{"level":"error","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b"}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b"}
{"level":"info","ts":"2026-07-06T01:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad"}
{"level":"info","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41060","PortSpecifier":{"PortValue":41060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-736613.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41060","PortSpecifier":{"PortValue":41060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301705,"nanos":421684313},"http":{"id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","method":"POST","headers":{":authority":"e2e-inf-a-736613.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4b2765f52e7dab50f29375a0934260559de10ad0539de30faaa4d327ef48fa9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-736613.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-736613/test-model-736613\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:35:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a7ce953-96f5-4dc8-86ab-0f9ce0fdd83a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58578","PortSpecifier":{"PortValue":58578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","method":"POST","path":"/ai-tenant-e2e-inf-a-736613/test-model-736613/v1/chat/completions","host":"e2e-inf-a-736613.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58578","PortSpecifier":{"PortValue":58578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301709,"nanos":486721975},"http":{"id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","method":"POST","headers":{":authority":"e2e-inf-a-736613.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-736613/test-model-736613/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JYx4bZACq5o7urTI_Cpz4hUsaPlvvs5w7xh2tfRx77NGaSucgB9xt5qZmwxt"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-736613.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JYx4bZACq5o7urTI_Cpz4hUsaPlvvs5w7xh2tfRx77NGaSucgB9xt5qZmwxt\"}"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-736613.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dee99fac-843f-4391-b901-61cf24557e11","keyName":"e2e-tenant-inference-736613","subscription":"test-model-736613-sub","tenant":"e2e-inf-a-736613","userId":"dee99fac-843f-4391-b901-61cf24557e11","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-736613.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-736613/test-model-736613\",\"requestedSubscription\":\"test-model-736613-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-736613.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-736613","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-736613-sub","namespace":"ai-tenant-e2e-inf-a-736613","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-736613/test-model-736613\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-736613-sub"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dee99fac-843f-4391-b901-61cf24557e11","keyName":"e2e-tenant-inference-736613","selected_subscription":"test-model-736613-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-736613/test-model-736613-sub@ai-tenant-e2e-inf-a-736613/test-model-736613","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-736613","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-736613-sub","namespace":"ai-tenant-e2e-inf-a-736613","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fee6694-7a1d-4fae-bfa8-60970f09d7a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58582","PortSpecifier":{"PortValue":58582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-736613.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58582","PortSpecifier":{"PortValue":58582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301709,"nanos":778394297},"http":{"id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","method":"POST","headers":{":authority":"e2e-inf-a-736613.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b4b2765f52e7dab50f29375a0934260559de10ad0539de30faaa4d327ef48fa9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-736613.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-736613/test-model-736613\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb68b783-6eb4-4282-8b3c-cc0bb2d8f90b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48936","PortSpecifier":{"PortValue":48936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","method":"POST","path":"/ai-tenant-e2e-inf-b-c2d358/test-model-c2d358/v1/chat/completions","host":"e2e-inf-b-c2d358.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48936","PortSpecifier":{"PortValue":48936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301709,"nanos":816317248},"http":{"id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","method":"POST","headers":{":authority":"e2e-inf-b-c2d358.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-c2d358/test-model-c2d358/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1N6N6gX6WtmLoHh1_i92ahzzbsRaVEIsSlZRLRMAtW0SqzMklPwIZ1mJLbOC"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-c2d358.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1N6N6gX6WtmLoHh1_i92ahzzbsRaVEIsSlZRLRMAtW0SqzMklPwIZ1mJLbOC\"}"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-c2d358.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-c2d358.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-c2d358.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-c2d358/test-model-c2d358/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T01:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11ec5779-84d1-404d-93e8-a5c19c8df0e8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T01:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca8682074205584be8c634621b33ad59ab507bc49a61cbea9b3f9031a7fc8659"}
{"level":"info","ts":"2026-07-06T01:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4e80cb0c22a59e57a74742b63089d6a5f251e29ced81dbe689fb84c7a084b0a"}
{"level":"info","ts":"2026-07-06T01:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a7c7bfd2f8b9567d3e8b512f15a1b99e276859b59a12e14cb67811350de9911"}
{"level":"info","ts":"2026-07-06T01:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4b2765f52e7dab50f29375a0934260559de10ad0539de30faaa4d327ef48fa9"}
{"level":"info","ts":"2026-07-06T01:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1687bbea5aa518f6036cc214f74111220f630e05c59fe75001940fcec0aac6ad"}
{"level":"info","ts":"2026-07-06T01:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb06c65f4c0ec811e114352aba2be1ec75c782c6cceff7f6ac67a3005e11be3b"}
{"level":"info","ts":"2026-07-06T01:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f62912c37eb3a0df24f945da34416c59e1281d6a7175881541e77cc8e0f1e988"}
{"level":"info","ts":"2026-07-06T01:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cef71ea945c99270d65cee211fdb4d8ea343c56a8cc26b0e40436445de9a7e1b"}
{"level":"info","ts":"2026-07-06T01:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a099152f34a0c69bd2f67a122d51b341c3e34f24686712467cd9073089390184"}
{"level":"info","ts":"2026-07-06T01:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48c3b6a54213e9bf99332cc155930524095492ca8ea3ff5f8ee7dcfc647b856a"}
{"level":"info","ts":"2026-07-06T01:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6420fee47182c1909c69478f225d3784d72333ff5c9ee61050bf270684e6857"}
{"level":"info","ts":"2026-07-06T01:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/172399003669c3407893b01209e62d5c9c07eb9d8bd2c6d0da54b2c59a0b123c"}
{"level":"info","ts":"2026-07-06T01:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09e3436a2a1e1da1d7f2f16de82822463c0ae7eea489b6726ea23e6678259650"}
{"level":"info","ts":"2026-07-06T01:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f410eb87df5fdb9305f45a85b07dcbbf96d5a4494ecaebc72b05f92fc45a21e5"}
{"level":"info","ts":"2026-07-06T01:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43f9c5f98dfebbc8e4ca88e9ce154a23279c4f278ca6ff5d35dd12ca4fa6b763"}
{"level":"info","ts":"2026-07-06T01:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61c3d6640db3fa08209199aa0d978e748a5aa369067f04e51402b9940f13c7e3"}
{"level":"info","ts":"2026-07-06T01:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/673713935574c89c0330da7d84ab93373b238c7cb8ee5a97aabf3a798c2de09e"}
{"level":"info","ts":"2026-07-06T01:35:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e943cac36ea302e385d361a73589d1069dd817df9ac1b313bcd20f22a524a62"}
{"level":"info","ts":"2026-07-06T01:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e45ef7fbc6235df976ab05f02a0dbac6dc18d773eccdb5e68768f4f89757b571"}
{"level":"info","ts":"2026-07-06T01:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e103db963508705d3399a4e334b1145f01928da6cd43f5d6a0eb27bd5c52f38"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36"}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36"}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:36:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36"}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c"}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c"}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c"}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d"}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d"}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d"}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:36:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:36:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d"}
{"level":"info","ts":"2026-07-06T01:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a466049894c83a02e86a2e40156c497a8e223893263f68d924849d028ed5a36"}
{"level":"info","ts":"2026-07-06T01:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a05eecf52128ccd99617829e210309a3c7dad28cf231339c6f829fe1041662c"}
{"level":"info","ts":"2026-07-06T01:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f86f7e0d336ab92828a87edd0d2bdf6eb62ee027ada9e2301a0d609638dcd8c"}
{"level":"info","ts":"2026-07-06T01:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0ff2495576a134a3ed7912d5ad7642ad9c7974a01969bc8ec8fa4d29bf10f6d"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243"}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243"}
{"level":"error","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f"}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"}
{"level":"debug","ts":"2026-07-06T01:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90"}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90"}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90"}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90"}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8856119e37d9af3d7f8004a1865259221f5e0d076f9598e73425a6661c706a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90"}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8856119e37d9af3d7f8004a1865259221f5e0d076f9598e73425a6661c706a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae22ff0efa19fdf75fcfa64c2ac9763c5ddf6bda4680e91370723a5a2ab5a34f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8856119e37d9af3d7f8004a1865259221f5e0d076f9598e73425a6661c706a3c"}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae22ff0efa19fdf75fcfa64c2ac9763c5ddf6bda4680e91370723a5a2ab5a34f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8856119e37d9af3d7f8004a1865259221f5e0d076f9598e73425a6661c706a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8856119e37d9af3d7f8004a1865259221f5e0d076f9598e73425a6661c706a3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8856119e37d9af3d7f8004a1865259221f5e0d076f9598e73425a6661c706a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90"}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae22ff0efa19fdf75fcfa64c2ac9763c5ddf6bda4680e91370723a5a2ab5a34f"}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae22ff0efa19fdf75fcfa64c2ac9763c5ddf6bda4680e91370723a5a2ab5a34f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae22ff0efa19fdf75fcfa64c2ac9763c5ddf6bda4680e91370723a5a2ab5a34f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae22ff0efa19fdf75fcfa64c2ac9763c5ddf6bda4680e91370723a5a2ab5a34f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8856119e37d9af3d7f8004a1865259221f5e0d076f9598e73425a6661c706a3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477"}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae22ff0efa19fdf75fcfa64c2ac9763c5ddf6bda4680e91370723a5a2ab5a34f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8856119e37d9af3d7f8004a1865259221f5e0d076f9598e73425a6661c706a3c"}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5"}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae22ff0efa19fdf75fcfa64c2ac9763c5ddf6bda4680e91370723a5a2ab5a34f"}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477"}
{"level":"info","ts":"2026-07-06T01:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5"}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5"}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5"}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5"}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"debug","ts":"2026-07-06T01:38:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3a6e1ae0f90efbb046205af2ad6e582eb099f07cb52a6dd3782e6422a47da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3a6e1ae0f90efbb046205af2ad6e582eb099f07cb52a6dd3782e6422a47da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e5550707cecec9bab2fc7604d3617586c070ac729dfe00c07eb96e91b20623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3a6e1ae0f90efbb046205af2ad6e582eb099f07cb52a6dd3782e6422a47da2"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e5550707cecec9bab2fc7604d3617586c070ac729dfe00c07eb96e91b20623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d3a6e1ae0f90efbb046205af2ad6e582eb099f07cb52a6dd3782e6422a47da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d3a6e1ae0f90efbb046205af2ad6e582eb099f07cb52a6dd3782e6422a47da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d3a6e1ae0f90efbb046205af2ad6e582eb099f07cb52a6dd3782e6422a47da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d949e1ca6b33ee07de812eb5cf93a4b3240d1b379fbbc40440eeae79809351","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e5550707cecec9bab2fc7604d3617586c070ac729dfe00c07eb96e91b20623"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d949e1ca6b33ee07de812eb5cf93a4b3240d1b379fbbc40440eeae79809351","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03e5550707cecec9bab2fc7604d3617586c070ac729dfe00c07eb96e91b20623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03e5550707cecec9bab2fc7604d3617586c070ac729dfe00c07eb96e91b20623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d949e1ca6b33ee07de812eb5cf93a4b3240d1b379fbbc40440eeae79809351"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03e5550707cecec9bab2fc7604d3617586c070ac729dfe00c07eb96e91b20623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d3a6e1ae0f90efbb046205af2ad6e582eb099f07cb52a6dd3782e6422a47da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94d949e1ca6b33ee07de812eb5cf93a4b3240d1b379fbbc40440eeae79809351","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:38:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94d949e1ca6b33ee07de812eb5cf93a4b3240d1b379fbbc40440eeae79809351"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94d949e1ca6b33ee07de812eb5cf93a4b3240d1b379fbbc40440eeae79809351","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03e5550707cecec9bab2fc7604d3617586c070ac729dfe00c07eb96e91b20623","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94d949e1ca6b33ee07de812eb5cf93a4b3240d1b379fbbc40440eeae79809351","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d3a6e1ae0f90efbb046205af2ad6e582eb099f07cb52a6dd3782e6422a47da2"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03e5550707cecec9bab2fc7604d3617586c070ac729dfe00c07eb96e91b20623"}
{"level":"info","ts":"2026-07-06T01:38:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94d949e1ca6b33ee07de812eb5cf93a4b3240d1b379fbbc40440eeae79809351"}
{"level":"info","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57960","PortSpecifier":{"PortValue":57960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58f26063-28d0-46d0-9df5-4afa3909841e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57960","PortSpecifier":{"PortValue":57960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301892,"nanos":280340310},"http":{"id":"58f26063-28d0-46d0-9df5-4afa3909841e","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58f26063-28d0-46d0-9df5-4afa3909841e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39632","PortSpecifier":{"PortValue":39632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10f233b9-876a-49a1-90d3-ba052812ef4f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39632","PortSpecifier":{"PortValue":39632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301892,"nanos":351401407},"http":{"id":"10f233b9-876a-49a1-90d3-ba052812ef4f","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/auth-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10f233b9-876a-49a1-90d3-ba052812ef4f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57966","PortSpecifier":{"PortValue":57966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","method":"GET","path":"/maas-api/v1/api-keys/1c0c4762-6c1c-49fb-bad6-3aa4bc84105d","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57966","PortSpecifier":{"PortValue":57966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301892,"nanos":441687055},"http":{"id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","method":"GET","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1c0c4762-6c1c-49fb-bad6-3aa4bc84105d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1c0c4762-6c1c-49fb-bad6-3aa4bc84105d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c510d2d-b6b2-4f0d-b85e-aa7a88afcbb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39646","PortSpecifier":{"PortValue":39646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","method":"GET","path":"/maas-api/v1/api-keys/253c496c-976c-482b-95f2-07e7e0f8f518","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39646","PortSpecifier":{"PortValue":39646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301892,"nanos":484738156},"http":{"id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","method":"GET","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/253c496c-976c-482b-95f2-07e7e0f8f518",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/253c496c-976c-482b-95f2-07e7e0f8f518",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/auth-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:38:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05aa186f-b6ad-42a9-b5f8-c22327451fc9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58820","PortSpecifier":{"PortValue":58820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8e3a028-44df-4581-babd-08d268fc96b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58820","PortSpecifier":{"PortValue":58820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301907,"nanos":657686260},"http":{"id":"e8e3a028-44df-4581-babd-08d268fc96b6","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8e3a028-44df-4581-babd-08d268fc96b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41082","PortSpecifier":{"PortValue":41082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36c49dfc-221f-4371-854d-a0601b38c4a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41082","PortSpecifier":{"PortValue":41082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301907,"nanos":696292221},"http":{"id":"36c49dfc-221f-4371-854d-a0601b38c4a2","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/auth-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36c49dfc-221f-4371-854d-a0601b38c4a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58828","PortSpecifier":{"PortValue":58828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58828","PortSpecifier":{"PortValue":58828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301907,"nanos":739455172},"http":{"id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","method":"GET","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RanMCADQIIWiThdN_M2BnQfDw29396Ao5xssKzCeWnqKhcyLe3Ldty6Iwhs4"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RanMCADQIIWiThdN_M2BnQfDw29396Ao5xssKzCeWnqKhcyLe3Ldty6Iwhs4\"}"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"96933b4d-3b1f-4c7f-acf1-dfd0f470f766","keyName":"e2e-auth-iso-a-61bd24","subscription":"e2e-auth-iso-47838f","tenant":"e2e-shared-a-7b5094","userId":"96933b4d-3b1f-4c7f-acf1-dfd0f470f766","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-47838f"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:38:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7367f6b0-5e1b-4439-8eb8-8140a72f318b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48076","PortSpecifier":{"PortValue":48076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48076","PortSpecifier":{"PortValue":48076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301922,"nanos":829353753},"http":{"id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2311dc1-d4cf-4d39-bb4c-b8849825346e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58308","PortSpecifier":{"PortValue":58308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58308","PortSpecifier":{"PortValue":58308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301922,"nanos":869127301},"http":{"id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/auth-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5e5bb8a-048e-48e2-9846-637c35bca3c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58322","PortSpecifier":{"PortValue":58322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58322","PortSpecifier":{"PortValue":58322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301922,"nanos":907604845},"http":{"id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","method":"GET","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HTY8LxeXtY4dI2J1_GuLJvE5Xrfavney43qJWMU1nJt5f5RcVO4jUpTIgND4"}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fe3397.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HTY8LxeXtY4dI2J1_GuLJvE5Xrfavney43qJWMU1nJt5f5RcVO4jUpTIgND4\"}"}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fe3397.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T01:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13b70ad7-35f0-4d60-b30d-473f98a841fd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56788","PortSpecifier":{"PortValue":56788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56788","PortSpecifier":{"PortValue":56788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301940,"nanos":142670906},"http":{"id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b6a68d1-ee06-419f-9d39-222ad6dea930","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47850","PortSpecifier":{"PortValue":47850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dae57e46-4a5d-4d65-8613-e2f306124406","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47850","PortSpecifier":{"PortValue":47850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301940,"nanos":176532061},"http":{"id":"dae57e46-4a5d-4d65-8613-e2f306124406","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/auth-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dae57e46-4a5d-4d65-8613-e2f306124406","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56796","PortSpecifier":{"PortValue":56796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56796","PortSpecifier":{"PortValue":56796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301940,"nanos":218694695},"http":{"id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"562537d5-f576-4ac8-8e9f-e4a8ebe41942","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47862","PortSpecifier":{"PortValue":47862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47862","PortSpecifier":{"PortValue":47862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301940,"nanos":256063147},"http":{"id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/auth-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c13461e-15d0-4c7d-abdb-716cf34b8aa5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41162","PortSpecifier":{"PortValue":41162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41162","PortSpecifier":{"PortValue":41162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301957,"nanos":483277692},"http":{"id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29d3ec2f-c5f1-4ce4-81eb-7ff0f06e5263","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41538","PortSpecifier":{"PortValue":41538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41538","PortSpecifier":{"PortValue":41538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301957,"nanos":519611641},"http":{"id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/auth-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e2c799e-f88b-4b5b-8133-c32e9e901f0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41546","PortSpecifier":{"PortValue":41546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c50afc1-39de-4f80-9e21-754319b65e84","method":"GET","path":"/maas-api/v1/api-keys/790cf0f6-0f14-4dec-bd00-aca42746d94d","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41546","PortSpecifier":{"PortValue":41546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301957,"nanos":562513305},"http":{"id":"9c50afc1-39de-4f80-9e21-754319b65e84","method":"GET","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/790cf0f6-0f14-4dec-bd00-aca42746d94d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/790cf0f6-0f14-4dec-bd00-aca42746d94d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/auth-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c50afc1-39de-4f80-9e21-754319b65e84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41174","PortSpecifier":{"PortValue":41174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ea461ab-a115-43e3-bac6-2b65009a5204","method":"GET","path":"/maas-api/v1/api-keys/790cf0f6-0f14-4dec-bd00-aca42746d94d","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41174","PortSpecifier":{"PortValue":41174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301957,"nanos":597311224},"http":{"id":"2ea461ab-a115-43e3-bac6-2b65009a5204","method":"GET","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/790cf0f6-0f14-4dec-bd00-aca42746d94d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/790cf0f6-0f14-4dec-bd00-aca42746d94d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ea461ab-a115-43e3-bac6-2b65009a5204","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51534","PortSpecifier":{"PortValue":51534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe87d9da-8f59-4a86-9b33-a1886123743f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51534","PortSpecifier":{"PortValue":51534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301979,"nanos":93644469},"http":{"id":"fe87d9da-8f59-4a86-9b33-a1886123743f","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe87d9da-8f59-4a86-9b33-a1886123743f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59068","PortSpecifier":{"PortValue":59068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59068","PortSpecifier":{"PortValue":59068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301979,"nanos":130751988},"http":{"id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/auth-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c1b2cd3-f311-4463-b2ec-d42883cfc1fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51544","PortSpecifier":{"PortValue":51544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51544","PortSpecifier":{"PortValue":51544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783301979,"nanos":174598270},"http":{"id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CszARwI5MCNj7VVb_aLDICxM47GE9yIr13Aej5AvG5lxskP3hPKMhBjcpfsz"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CszARwI5MCNj7VVb_aLDICxM47GE9yIr13Aej5AvG5lxskP3hPKMhBjcpfsz\"}"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aed27f41-8744-480b-aec9-0f240d4759fb","keyName":"e2e-auth-iso-a-65bb2c","subscription":"e2e-auth-iso-b7ce65","tenant":"e2e-shared-a-7b5094","userId":"aed27f41-8744-480b-aec9-0f240d4759fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/auth-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b7ce65"}
{"level":"info","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:39:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8915d0fc-d0a8-471f-b657-e3314bb3e452","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2f749b282b5c753454d3f7b9b6b750715539efee0f530c7b42bd16cd3fa0477"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03e5550707cecec9bab2fc7604d3617586c070ac729dfe00c07eb96e91b20623"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76c721831364d45002953ff28c32c9176132db4b84ba24f3fe2a5c1b79ecdcf5"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35413f555c2b651560199732013715b9afa662a516d992f984fda5432d383e8d"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a11c750f822c3477c54d64288f3b4eac30a2257341d2d10964ccfe86a36af8d8"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9822de63c7e034f639691c27346b0fb3c917c49d0a61f68c81c872230a1a8bb1"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94d949e1ca6b33ee07de812eb5cf93a4b3240d1b379fbbc40440eeae79809351"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d915af15a4c30704c8d2ac2bacd084f89e05450d39fb7a5d8400e880b944bd0"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae22ff0efa19fdf75fcfa64c2ac9763c5ddf6bda4680e91370723a5a2ab5a34f"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e953e265998d89e246c0f98acef51b73202eb938dc81a1cadaa821739111082d"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8856119e37d9af3d7f8004a1865259221f5e0d076f9598e73425a6661c706a3c"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11ae0741eda421f7bf713a41191380f9377b12f37756e93ab7e67ff507c4b13f"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6e05713046b3d49cb7b88d75c91c768f8d5b1d0bb73ad4a8f84cef29acb6607"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d3a6e1ae0f90efbb046205af2ad6e582eb099f07cb52a6dd3782e6422a47da2"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e292c73d0f52f8bdcb1966169ccce9c19e628136ba12065c3a4b61b2e76e6b5"}
{"level":"info","ts":"2026-07-06T01:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfe29cde2a1c02bef2f0f1821b3c8e23346bb3d3b1aa606288a92327d03d8d90"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569"}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569"}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804"}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4"}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4"}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0"}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd"}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4"}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:39:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0"}
{"level":"info","ts":"2026-07-06T01:39:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"}
{"level":"error","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57"}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804"}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804"}
{"level":"info","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4"}
{"level":"debug","ts":"2026-07-06T01:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910"}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d"}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491"}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:40:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"}
{"level":"debug","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"}
{"level":"info","ts":"2026-07-06T01:40:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569"}
{"level":"info","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38618","PortSpecifier":{"PortValue":38618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3bca3ab-5097-4b9c-8414-04616eded669","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38618","PortSpecifier":{"PortValue":38618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302032,"nanos":988963672},"http":{"id":"a3bca3ab-5097-4b9c-8414-04616eded669","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/sub-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3bca3ab-5097-4b9c-8414-04616eded669","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45528","PortSpecifier":{"PortValue":45528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"375ab116-e9df-43db-bdca-6ab9474dbadb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45528","PortSpecifier":{"PortValue":45528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302033,"nanos":28804293},"http":{"id":"375ab116-e9df-43db-bdca-6ab9474dbadb","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/sub-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"375ab116-e9df-43db-bdca-6ab9474dbadb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38634","PortSpecifier":{"PortValue":38634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38634","PortSpecifier":{"PortValue":38634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302033,"nanos":69082143},"http":{"id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","method":"GET","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GnIsfZ0ouqXRCE16_ZVsuyWauT1GfKNA6s8pltVLtuo13KKIP0XqPfrCo9Lg"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GnIsfZ0ouqXRCE16_ZVsuyWauT1GfKNA6s8pltVLtuo13KKIP0XqPfrCo9Lg\"}"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d45efbc1-791a-47fd-b152-7cd1d20ed88b","keyName":"e2e-sub-iso-69daed","subscription":"e2e-a-only-f7f6e1","tenant":"e2e-shared-a-7b5094","userId":"d45efbc1-791a-47fd-b152-7cd1d20ed88b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/sub-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f7f6e1"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"820bcf81-408c-434c-9ad9-ff89ae854ba6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45530","PortSpecifier":{"PortValue":45530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64adcfba-3053-4faa-8619-f5fef89d5865","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45530","PortSpecifier":{"PortValue":45530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302033,"nanos":100927210},"http":{"id":"64adcfba-3053-4faa-8619-f5fef89d5865","method":"GET","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kiIdKKzoYKs7VU38_dTrgHdVgHQUYuHVjK4MaXET2bw5MF66AUvJ2Ikz6y4E"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fe3397.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kiIdKKzoYKs7VU38_dTrgHdVgHQUYuHVjK4MaXET2bw5MF66AUvJ2Ikz6y4E\"}"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fe3397.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2943d94-caa4-4c9b-ae0d-5d015e58ab4c","keyName":"e2e-sub-iso-6cd2e5","subscription":"e2e-b-only-f7f6e1","tenant":"e2e-shared-b-fe3397","userId":"a2943d94-caa4-4c9b-ae0d-5d015e58ab4c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/sub-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f7f6e1"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64adcfba-3053-4faa-8619-f5fef89d5865","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44610","PortSpecifier":{"PortValue":44610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44610","PortSpecifier":{"PortValue":44610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302043,"nanos":217574272},"http":{"id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/sub-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e20ba55-a0b0-406f-b98c-fbee300767e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57018","PortSpecifier":{"PortValue":57018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd149433-91c4-469f-bf6a-14dec46a42ba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57018","PortSpecifier":{"PortValue":57018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302043,"nanos":263295467},"http":{"id":"dd149433-91c4-469f-bf6a-14dec46a42ba","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/sub-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd149433-91c4-469f-bf6a-14dec46a42ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44624","PortSpecifier":{"PortValue":44624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44624","PortSpecifier":{"PortValue":44624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302043,"nanos":302332265},"http":{"id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-173wUAat44zXzsZYN_nrnslZ4ubhxie1c8unQqg8XYmj3FLscT79fYxwiv8iP"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-173wUAat44zXzsZYN_nrnslZ4ubhxie1c8unQqg8XYmj3FLscT79fYxwiv8iP\"}"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5341a1f4-d3bf-4aac-9b65-1749416546cf","keyName":"e2e-sub-iso-cc4437","subscription":"e2e-shared-sub-035006","tenant":"e2e-shared-a-7b5094","userId":"5341a1f4-d3bf-4aac-9b65-1749416546cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/sub-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-035006"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61a79500-e5b2-4be8-aa21-b47cd23ac20e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57026","PortSpecifier":{"PortValue":57026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57026","PortSpecifier":{"PortValue":57026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302043,"nanos":331602481},"http":{"id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RqdoJrvbsh2ODW0N_VifeS0ISmmS7wdjIU7cL2sgtvFcaFeMIzRyviZd0QOp"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fe3397.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RqdoJrvbsh2ODW0N_VifeS0ISmmS7wdjIU7cL2sgtvFcaFeMIzRyviZd0QOp\"}"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fe3397.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"345c8003-7853-4ccf-b51b-279916284ace","keyName":"e2e-sub-iso-389b5e","subscription":"e2e-shared-sub-035006","tenant":"e2e-shared-b-fe3397","userId":"345c8003-7853-4ccf-b51b-279916284ace","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/sub-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-035006"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fc57c18-590e-4165-a8c5-4e1206c696ed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ddd0a89791bcc72279ab5c4d8ab5dcafb210a43d4e0b1da76de31ecbde3ba2b"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27ea547b9674e2714a50d2d5e43d4220787947fe3b97b267ac5873e7c9e795ce"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6519910a44cd3a079d3a91f559c273e49bb56b64e6c7bb17c408e93720d05569"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0a5f3567ec0960dbaad8497d294ed87185163d1ca6647240cf1252d43e0dc47"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a4040737de587de9be7358d4ed14e5a1fd2ef5db9d6d8220b02f88c147638c8"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1dc3515b506eed52b41357f4d786610d8752558f8f5f26a9e5ac93346dfa82d"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b860f2f37e9db2c14921010e5294f0e82bb8cd7632e8aa9a5b20fa57828e5b57"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1ef70a5bea746ad135a8f0633f157970f84681d8892298d9847f6dff9987fac"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cb226d837e9d2590bb28fdfbc25b6ac083c91eb578671aed606ef8970a7aec4"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/314ba0aff9246b7c498d9b93f580dec162dc4e2d92ed21d6ccc2ede5461a960e"}
{"level":"info","ts":"2026-07-06T01:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ac05277259a946b739f0c6701a2fb7b19b836f99bdbc6f22301a981bf8f8804"}
{"level":"info","ts":"2026-07-06T01:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17936a7d91dee44b16c2c20922d61271549f0456d4cf679e617e7bd6e2c5f4e0"}
{"level":"info","ts":"2026-07-06T01:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf5e8bf39f8903a5af76fd4d09d33a593b4460b2fb3d765e131e865882e89910"}
{"level":"info","ts":"2026-07-06T01:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b68a7ae66e31c3e6c67442bad5f44c4da9c8faedc72d4a5df711b0c2a683d38b"}
{"level":"info","ts":"2026-07-06T01:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a35c2b0192bfa621e42bde789ce170a223e766cd160277931a6637d16a60fbd"}
{"level":"info","ts":"2026-07-06T01:40:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cf0f608f663d648994f52fd8013e5344912cb22ea09a4803d81bc40d3e05491"}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"}
{"level":"error","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"}
{"level":"error","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c"}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c"}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c"}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c"}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c"}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed"}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed"}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed"}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed"}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed"}
{"level":"debug","ts":"2026-07-06T01:41:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d"}
{"level":"info","ts":"2026-07-06T01:41:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"debug","ts":"2026-07-06T01:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"debug","ts":"2026-07-06T01:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"debug","ts":"2026-07-06T01:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71"}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71"}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}
{"level":"info","ts":"2026-07-06T01:41:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T01:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T01:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T01:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T01:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed"}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d"}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"}
{"level":"debug","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"}
{"level":"info","ts":"2026-07-06T01:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e"}
{"level":"info","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58482","PortSpecifier":{"PortValue":58482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58482","PortSpecifier":{"PortValue":58482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302114,"nanos":217364251},"http":{"id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a17ef1df-1571-4e20-93bb-e41e1e26a1c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49626","PortSpecifier":{"PortValue":49626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79829696-117e-4886-a3e8-1441ab3f4c7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49626","PortSpecifier":{"PortValue":49626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302114,"nanos":258517209},"http":{"id":"79829696-117e-4886-a3e8-1441ab3f4c7a","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/rate-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79829696-117e-4886-a3e8-1441ab3f4c7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4076981d-ec30-4925-8808-d287bd065058","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58490","PortSpecifier":{"PortValue":58490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4076981d-ec30-4925-8808-d287bd065058","method":"POST","path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4076981d-ec30-4925-8808-d287bd065058","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58490","PortSpecifier":{"PortValue":58490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302114,"nanos":296370860},"http":{"id":"4076981d-ec30-4925-8808-d287bd065058","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OplCqqKRWn1KtMwJ_ENfxenMVALvBAsuYGA4JGj2LpeweVXdMch3mH9j55dY"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4076981d-ec30-4925-8808-d287bd065058","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OplCqqKRWn1KtMwJ_ENfxenMVALvBAsuYGA4JGj2LpeweVXdMch3mH9j55dY\"}"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dcb6066-ba1c-4cf0-a2e9-0d2b3715b3df","keyName":"e2e-rate-a-a88911","subscription":"e2e-rate-iso-a-a88911","tenant":"e2e-shared-a-7b5094","userId":"3dcb6066-ba1c-4cf0-a2e9-0d2b3715b3df","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4076981d-ec30-4925-8808-d287bd065058","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\",\"requestedSubscription\":\"e2e-rate-iso-a-a88911\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a88911","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4076981d-ec30-4925-8808-d287bd065058","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a88911"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4076981d-ec30-4925-8808-d287bd065058","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3dcb6066-ba1c-4cf0-a2e9-0d2b3715b3df","keyName":"e2e-rate-a-a88911","selected_subscription":"e2e-rate-iso-a-a88911","selected_subscription_key":"ai-tenant-e2e-shared-a-7b5094/e2e-rate-iso-a-a88911@ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a88911","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4076981d-ec30-4925-8808-d287bd065058","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:41:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4076981d-ec30-4925-8808-d287bd065058","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58498","PortSpecifier":{"PortValue":58498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","method":"POST","path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58498","PortSpecifier":{"PortValue":58498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302115,"nanos":354874830},"http":{"id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OplCqqKRWn1KtMwJ_ENfxenMVALvBAsuYGA4JGj2LpeweVXdMch3mH9j55dY"}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OplCqqKRWn1KtMwJ_ENfxenMVALvBAsuYGA4JGj2LpeweVXdMch3mH9j55dY\"}"}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dcb6066-ba1c-4cf0-a2e9-0d2b3715b3df","keyName":"e2e-rate-a-a88911","subscription":"e2e-rate-iso-a-a88911","tenant":"e2e-shared-a-7b5094","userId":"3dcb6066-ba1c-4cf0-a2e9-0d2b3715b3df","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\",\"requestedSubscription\":\"e2e-rate-iso-a-a88911\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a88911","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a88911"}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3dcb6066-ba1c-4cf0-a2e9-0d2b3715b3df","keyName":"e2e-rate-a-a88911","selected_subscription":"e2e-rate-iso-a-a88911","selected_subscription_key":"ai-tenant-e2e-shared-a-7b5094/e2e-rate-iso-a-a88911@ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a88911","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfcdbaad-a47c-48c2-bed3-1c78027a74d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58510","PortSpecifier":{"PortValue":58510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","method":"POST","path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58510","PortSpecifier":{"PortValue":58510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302116,"nanos":392749824},"http":{"id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OplCqqKRWn1KtMwJ_ENfxenMVALvBAsuYGA4JGj2LpeweVXdMch3mH9j55dY"}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OplCqqKRWn1KtMwJ_ENfxenMVALvBAsuYGA4JGj2LpeweVXdMch3mH9j55dY\"}"}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3dcb6066-ba1c-4cf0-a2e9-0d2b3715b3df","keyName":"e2e-rate-a-a88911","subscription":"e2e-rate-iso-a-a88911","tenant":"e2e-shared-a-7b5094","userId":"3dcb6066-ba1c-4cf0-a2e9-0d2b3715b3df","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\",\"requestedSubscription\":\"e2e-rate-iso-a-a88911\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a88911","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a88911"}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3dcb6066-ba1c-4cf0-a2e9-0d2b3715b3df","keyName":"e2e-rate-a-a88911","selected_subscription":"e2e-rate-iso-a-a88911","selected_subscription_key":"ai-tenant-e2e-shared-a-7b5094/e2e-rate-iso-a-a88911@ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a88911","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:41:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af9717c5-7e2a-46eb-aaf8-4f7f2095d7f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53802","PortSpecifier":{"PortValue":53802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b10a288f-0fd3-40e5-8a60-2feb94400505","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53802","PortSpecifier":{"PortValue":53802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302127,"nanos":201323048},"http":{"id":"b10a288f-0fd3-40e5-8a60-2feb94400505","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b10a288f-0fd3-40e5-8a60-2feb94400505","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59090","PortSpecifier":{"PortValue":59090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59090","PortSpecifier":{"PortValue":59090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302127,"nanos":266039310},"http":{"id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"]}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/774901eb4d25"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1b3f7fa9-d555-491d-b66f-3330408ba700"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a7d35a50-03cc-4192-9f12-83e62c61ec89","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/rate-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e2e0b44-3426-4c83-9ee0-5623a5abcf70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53804","PortSpecifier":{"PortValue":53804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","method":"POST","path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53804","PortSpecifier":{"PortValue":53804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302127,"nanos":303458028},"http":{"id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OYPH4Sc51Td4ukAB_YxNF0bCsf78DpyCQMdaxskw8abiIN4ay2ic1vCOSwRl"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OYPH4Sc51Td4ukAB_YxNF0bCsf78DpyCQMdaxskw8abiIN4ay2ic1vCOSwRl\"}"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a37b2cd9-d8d4-42dd-ab0d-9d359e9abad2","keyName":"e2e-rate-a-8b9ba7","subscription":"e2e-rate-iso-a-8b9ba7","tenant":"e2e-shared-a-7b5094","userId":"a37b2cd9-d8d4-42dd-ab0d-9d359e9abad2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\",\"requestedSubscription\":\"e2e-rate-iso-a-8b9ba7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b9ba7","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b9ba7"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a37b2cd9-d8d4-42dd-ab0d-9d359e9abad2","keyName":"e2e-rate-a-8b9ba7","selected_subscription":"e2e-rate-iso-a-8b9ba7","selected_subscription_key":"ai-tenant-e2e-shared-a-7b5094/e2e-rate-iso-a-8b9ba7@ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b9ba7","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:42:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0f9f288-f2a0-4e00-9707-5f213fb64c91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53810","PortSpecifier":{"PortValue":53810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","method":"POST","path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53810","PortSpecifier":{"PortValue":53810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302128,"nanos":350361263},"http":{"id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OYPH4Sc51Td4ukAB_YxNF0bCsf78DpyCQMdaxskw8abiIN4ay2ic1vCOSwRl"}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OYPH4Sc51Td4ukAB_YxNF0bCsf78DpyCQMdaxskw8abiIN4ay2ic1vCOSwRl\"}"}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a37b2cd9-d8d4-42dd-ab0d-9d359e9abad2","keyName":"e2e-rate-a-8b9ba7","subscription":"e2e-rate-iso-a-8b9ba7","tenant":"e2e-shared-a-7b5094","userId":"a37b2cd9-d8d4-42dd-ab0d-9d359e9abad2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\",\"requestedSubscription\":\"e2e-rate-iso-a-8b9ba7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b9ba7","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b9ba7"}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a37b2cd9-d8d4-42dd-ab0d-9d359e9abad2","keyName":"e2e-rate-a-8b9ba7","selected_subscription":"e2e-rate-iso-a-8b9ba7","selected_subscription_key":"ai-tenant-e2e-shared-a-7b5094/e2e-rate-iso-a-8b9ba7@ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b9ba7","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b207f1a-74bb-4482-9356-5bb3d99f029f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35346","PortSpecifier":{"PortValue":35346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","method":"POST","path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions","host":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35346","PortSpecifier":{"PortValue":35346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302129,"nanos":392410651},"http":{"id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","method":"POST","headers":{":authority":"e2e-shared-a-7b5094.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OYPH4Sc51Td4ukAB_YxNF0bCsf78DpyCQMdaxskw8abiIN4ay2ic1vCOSwRl"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OYPH4Sc51Td4ukAB_YxNF0bCsf78DpyCQMdaxskw8abiIN4ay2ic1vCOSwRl\"}"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a37b2cd9-d8d4-42dd-ab0d-9d359e9abad2","keyName":"e2e-rate-a-8b9ba7","subscription":"e2e-rate-iso-a-8b9ba7","tenant":"e2e-shared-a-7b5094","userId":"a37b2cd9-d8d4-42dd-ab0d-9d359e9abad2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\",\"requestedSubscription\":\"e2e-rate-iso-a-8b9ba7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b5094.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b9ba7","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b9ba7"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a37b2cd9-d8d4-42dd-ab0d-9d359e9abad2","keyName":"e2e-rate-a-8b9ba7","selected_subscription":"e2e-rate-iso-a-8b9ba7","selected_subscription_key":"ai-tenant-e2e-shared-a-7b5094/e2e-rate-iso-a-8b9ba7@ai-tenant-e2e-shared-a-7b5094/rate-test-model-7b5094","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b5094","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b9ba7","namespace":"ai-tenant-e2e-shared-a-7b5094","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abaa28bf-e5d3-413a-8939-f797b4a68c77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39495602-7e84-4673-9dd1-db4fc9367040","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33926","PortSpecifier":{"PortValue":33926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39495602-7e84-4673-9dd1-db4fc9367040","method":"POST","path":"/ai-tenant-e2e-shared-b-fe3397/rate-test-model-fe3397/v1/completions","host":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39495602-7e84-4673-9dd1-db4fc9367040","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33926","PortSpecifier":{"PortValue":33926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783302129,"nanos":428932932},"http":{"id":"39495602-7e84-4673-9dd1-db4fc9367040","method":"POST","headers":{":authority":"e2e-shared-b-fe3397.apps.4dce7040-13f3-4c25-8e7c-774901eb4d25.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-fe3397/rate-test-model-fe3397/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VocsK0pJGxJknn3s_EglKb9T31QyIgO18t3c3G3F6X7Xk2WY8jDKnzKA4P33"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fe3397.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VocsK0pJGxJknn3s_EglKb9T31QyIgO18t3c3G3F6X7Xk2WY8jDKnzKA4P33\"}"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fe3397.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c236ce1a-f6c3-4cad-8586-2c6372ac15e1","keyName":"e2e-rate-b-8b9ba7","subscription":"e2e-rate-iso-b-8b9ba7","tenant":"e2e-shared-b-fe3397","userId":"c236ce1a-f6c3-4cad-8586-2c6372ac15e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-fe3397.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-fe3397/rate-test-model-fe3397\",\"requestedSubscription\":\"e2e-rate-iso-b-8b9ba7\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fe3397.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fe3397","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8b9ba7","namespace":"ai-tenant-e2e-shared-b-fe3397","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39495602-7e84-4673-9dd1-db4fc9367040","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fe3397/rate-test-model-fe3397\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8b9ba7"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39495602-7e84-4673-9dd1-db4fc9367040","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c236ce1a-f6c3-4cad-8586-2c6372ac15e1","keyName":"e2e-rate-b-8b9ba7","selected_subscription":"e2e-rate-iso-b-8b9ba7","selected_subscription_key":"ai-tenant-e2e-shared-b-fe3397/e2e-rate-iso-b-8b9ba7@ai-tenant-e2e-shared-b-fe3397/rate-test-model-fe3397","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fe3397","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8b9ba7","namespace":"ai-tenant-e2e-shared-b-fe3397","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39495602-7e84-4673-9dd1-db4fc9367040","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T01:42:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39495602-7e84-4673-9dd1-db4fc9367040","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90fe7aced8a3b95e7228d9c22a422f51d65267dbc14d8e7171d6e0bef156072c"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81fa2a5c66517b6d969aea88c95d89b8451595ca3456520e5fc1965de29d3c44"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59ba01b849a3466e4557ec51fa819b80668c9d96ad9c0d9931fae9d8cd638d79"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d1817b96bf4032702e1c8a0b83b429b49c3934339aa3095fc4cbcc780f87e6e"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/162f859d336ae6d8c5ea7eb1b6663080400d54add4c404d35ce32a7f6394affd"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6016c31c15b0b686be82009815bed0d1e8cc87a7bba742db8b4c87885b1054f7"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3113552c644bbf8bb4672945b039abcb960c563f780037aeabe6d8744d0cba6d"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c7dc5dcc9b65308a2b74d07c9daf5af8e415da446e06666697f9d9b90ae8d0e"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22b28563da66536a2c9e32f938546ebcba3dea0f2bc88439828474d5489b0454"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09d0489f3986b27583ee5664463176e6513f290519867e8ff2efcc5aac8586f7"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d26effb784a12023f8cd1452ea4406fd06d7d5a0344c6e53e6e5376d971d7c71"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/909a70fb5486b0be33b0c33297d586ebe0b6df46f7d770d073cae8524e451a28"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e84b4dd3b677909035a590375f205296152420f52c4f97edeaf15a5bae1d1b9"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52932cb7df23a7684a1a00bb43ff96f805134d0b3ded1e7aa8c944298560dd74"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f654b235dd745d0e206fb749f36341f20581c00f6721c4e2da93187d99bbbed"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/274c9077abcee8b80f8191759ff14aa925281d5ee3827030d9996a286d6cf243"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd10d7411f78d71a9104d8fae2191b9420cb22d61b41d3c24827429817a79450"}
{"level":"info","ts":"2026-07-06T01:42:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8320400688d17ce01c214ab2a4bad04b2ab613f8745956b5372f7ad434c657ad"}
{"level":"info","ts":"2026-07-06T01:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc644328c59ac12d6c1a13f5a983ce134b0c722c897260a53510e1c18797808a"}
{"level":"info","ts":"2026-07-06T01:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b03b8bba0aeed938378bbfad4cfa3bbabccb2ce64c446952e16644716eedcdb7"}