{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f75ac52c2ca6eec7822962e443a8a95f79f8e60eddbf3250e9fbdac8ceff34f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44275ae3bebc9d8d6d024fe1a34bbe0e98f93a5f5d8d4d1bc579d8e27ee98281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44275ae3bebc9d8d6d024fe1a34bbe0e98f93a5f5d8d4d1bc579d8e27ee98281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44275ae3bebc9d8d6d024fe1a34bbe0e98f93a5f5d8d4d1bc579d8e27ee98281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f75ac52c2ca6eec7822962e443a8a95f79f8e60eddbf3250e9fbdac8ceff34f"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345d0da26d6d34a7f7f2cacbf28fdede3595e1e271b2ce747a424888df006b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345d0da26d6d34a7f7f2cacbf28fdede3595e1e271b2ce747a424888df006b51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3123c18697bcbf90ed786d04c26e3d5ade20e945992b663693015fb9bcf4840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18fd551971a7712ab0a67f2b8ff979b827c0c75114d6f6c31fd4d5eb8c073a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44275ae3bebc9d8d6d024fe1a34bbe0e98f93a5f5d8d4d1bc579d8e27ee98281"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18fd551971a7712ab0a67f2b8ff979b827c0c75114d6f6c31fd4d5eb8c073a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345d0da26d6d34a7f7f2cacbf28fdede3595e1e271b2ce747a424888df006b51"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3deaba9d0fc3e8502f536fd08591e3b09445a66b4781af255b813490ced06d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3123c18697bcbf90ed786d04c26e3d5ade20e945992b663693015fb9bcf4840"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18fd551971a7712ab0a67f2b8ff979b827c0c75114d6f6c31fd4d5eb8c073a15"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f75ac52c2ca6eec7822962e443a8a95f79f8e60eddbf3250e9fbdac8ceff34f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44275ae3bebc9d8d6d024fe1a34bbe0e98f93a5f5d8d4d1bc579d8e27ee98281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"345d0da26d6d34a7f7f2cacbf28fdede3595e1e271b2ce747a424888df006b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["345d0da26d6d34a7f7f2cacbf28fdede3595e1e271b2ce747a424888df006b51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3deaba9d0fc3e8502f536fd08591e3b09445a66b4781af255b813490ced06d3e"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"345d0da26d6d34a7f7f2cacbf28fdede3595e1e271b2ce747a424888df006b51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18fd551971a7712ab0a67f2b8ff979b827c0c75114d6f6c31fd4d5eb8c073a15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18fd551971a7712ab0a67f2b8ff979b827c0c75114d6f6c31fd4d5eb8c073a15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/345d0da26d6d34a7f7f2cacbf28fdede3595e1e271b2ce747a424888df006b51"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18fd551971a7712ab0a67f2b8ff979b827c0c75114d6f6c31fd4d5eb8c073a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18fd551971a7712ab0a67f2b8ff979b827c0c75114d6f6c31fd4d5eb8c073a15"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"345d0da26d6d34a7f7f2cacbf28fdede3595e1e271b2ce747a424888df006b51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18fd551971a7712ab0a67f2b8ff979b827c0c75114d6f6c31fd4d5eb8c073a15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"info","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40654","PortSpecifier":{"PortValue":40654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6679e535-14a6-4545-bfd2-13c891bdb411","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40654","PortSpecifier":{"PortValue":40654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554103,"nanos":550796524},"http":{"id":"6679e535-14a6-4545-bfd2-13c891bdb411","method":"POST","headers":{":authority":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dcf7531e-b6af-4bd5-82a9-f9cb60611d46","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7467bed3-0f87-4e56-a20d-41a9d591d774"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bf39ad4a32b"]}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bf39ad4a32b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7467bed3-0f87-4e56-a20d-41a9d591d774"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dcf7531e-b6af-4bd5-82a9-f9cb60611d46","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7f57a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6679e535-14a6-4545-bfd2-13c891bdb411","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40058","PortSpecifier":{"PortValue":40058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8383c.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40058","PortSpecifier":{"PortValue":40058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554103,"nanos":599795294},"http":{"id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","method":"POST","headers":{":authority":"e2e-shared-b-b8383c.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dcf7531e-b6af-4bd5-82a9-f9cb60611d46","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7467bed3-0f87-4e56-a20d-41a9d591d774"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bf39ad4a32b"]}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bf39ad4a32b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7467bed3-0f87-4e56-a20d-41a9d591d774"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dcf7531e-b6af-4bd5-82a9-f9cb60611d46","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ac1a38a836cec6b5c292e5541e3d4888432ea806dc86af7929e35a3e0b05ba5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8383c.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8383c/rate-test-model-b8383c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b8383c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b7dc13a-b3f9-4a82-a6b0-bb20ea9839de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8fd726e-2531-43c0-951d-f464363382c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40666","PortSpecifier":{"PortValue":40666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8fd726e-2531-43c0-951d-f464363382c4","method":"POST","path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions","host":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8fd726e-2531-43c0-951d-f464363382c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40666","PortSpecifier":{"PortValue":40666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554103,"nanos":640948391},"http":{"id":"d8fd726e-2531-43c0-951d-f464363382c4","method":"POST","headers":{":authority":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CkqThSZzAY7LGUD_Q1ZyPwOdDvQ9OQahoIesQdgWL2gfzR10dw0q26T07i9"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CkqThSZzAY7LGUD_Q1ZyPwOdDvQ9OQahoIesQdgWL2gfzR10dw0q26T07i9\"}"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2184c9c-9aae-4249-b41a-cd45e50be67f","keyName":"e2e-rate-a-f36460","subscription":"e2e-rate-iso-a-f36460","tenant":"e2e-shared-a-7f57a3","userId":"d2184c9c-9aae-4249-b41a-cd45e50be67f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\",\"requestedSubscription\":\"e2e-rate-iso-a-f36460\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f36460","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8fd726e-2531-43c0-951d-f464363382c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7f57a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f36460"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8fd726e-2531-43c0-951d-f464363382c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2184c9c-9aae-4249-b41a-cd45e50be67f","keyName":"e2e-rate-a-f36460","selected_subscription":"e2e-rate-iso-a-f36460","selected_subscription_key":"ai-tenant-e2e-shared-a-7f57a3/e2e-rate-iso-a-f36460@ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f36460","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8fd726e-2531-43c0-951d-f464363382c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8fd726e-2531-43c0-951d-f464363382c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40682","PortSpecifier":{"PortValue":40682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"703df10a-d242-48b6-b732-5cfa936f21bf","method":"POST","path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions","host":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40682","PortSpecifier":{"PortValue":40682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554104,"nanos":696938618},"http":{"id":"703df10a-d242-48b6-b732-5cfa936f21bf","method":"POST","headers":{":authority":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CkqThSZzAY7LGUD_Q1ZyPwOdDvQ9OQahoIesQdgWL2gfzR10dw0q26T07i9"}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CkqThSZzAY7LGUD_Q1ZyPwOdDvQ9OQahoIesQdgWL2gfzR10dw0q26T07i9\"}"}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2184c9c-9aae-4249-b41a-cd45e50be67f","keyName":"e2e-rate-a-f36460","subscription":"e2e-rate-iso-a-f36460","tenant":"e2e-shared-a-7f57a3","userId":"d2184c9c-9aae-4249-b41a-cd45e50be67f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\",\"requestedSubscription\":\"e2e-rate-iso-a-f36460\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f36460","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"}}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7f57a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f36460"}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2184c9c-9aae-4249-b41a-cd45e50be67f","keyName":"e2e-rate-a-f36460","selected_subscription":"e2e-rate-iso-a-f36460","selected_subscription_key":"ai-tenant-e2e-shared-a-7f57a3/e2e-rate-iso-a-f36460@ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f36460","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"703df10a-d242-48b6-b732-5cfa936f21bf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40696","PortSpecifier":{"PortValue":40696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","method":"POST","path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions","host":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:40696","PortSpecifier":{"PortValue":40696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554105,"nanos":736857012},"http":{"id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","method":"POST","headers":{":authority":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CkqThSZzAY7LGUD_Q1ZyPwOdDvQ9OQahoIesQdgWL2gfzR10dw0q26T07i9"}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CkqThSZzAY7LGUD_Q1ZyPwOdDvQ9OQahoIesQdgWL2gfzR10dw0q26T07i9\"}"}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2184c9c-9aae-4249-b41a-cd45e50be67f","keyName":"e2e-rate-a-f36460","subscription":"e2e-rate-iso-a-f36460","tenant":"e2e-shared-a-7f57a3","userId":"d2184c9c-9aae-4249-b41a-cd45e50be67f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\",\"requestedSubscription\":\"e2e-rate-iso-a-f36460\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f36460","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"}}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7f57a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f36460"}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2184c9c-9aae-4249-b41a-cd45e50be67f","keyName":"e2e-rate-a-f36460","selected_subscription":"e2e-rate-iso-a-f36460","selected_subscription_key":"ai-tenant-e2e-shared-a-7f57a3/e2e-rate-iso-a-f36460@ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f36460","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce5e2a09-b5c7-4a95-a786-80c194bcd4b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd"}
{"level":"info","ts":"2026-07-20T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"info","ts":"2026-07-20T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3"}
{"level":"info","ts":"2026-07-20T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8"}
{"level":"info","ts":"2026-07-20T13:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"info","ts":"2026-07-20T13:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153"}
{"level":"info","ts":"2026-07-20T13:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"info","ts":"2026-07-20T13:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d392049468d4078ac680366ed3035a88ab8eede09d14aecde44d116d396c2bc2"}
{"level":"info","ts":"2026-07-20T13:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e"}
{"level":"info","ts":"2026-07-20T13:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec5319d492fa85717e22beb44e2af7b20c639d3df2d32a1f36a94f16aa676e0c"}
{"level":"info","ts":"2026-07-20T13:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01"}
{"level":"info","ts":"2026-07-20T13:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e"}
{"level":"error","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8"}
{"level":"error","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8"}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153"}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3"}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3"}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3"}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d392049468d4078ac680366ed3035a88ab8eede09d14aecde44d116d396c2bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d392049468d4078ac680366ed3035a88ab8eede09d14aecde44d116d396c2bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec5319d492fa85717e22beb44e2af7b20c639d3df2d32a1f36a94f16aa676e0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3"}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec5319d492fa85717e22beb44e2af7b20c639d3df2d32a1f36a94f16aa676e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d392049468d4078ac680366ed3035a88ab8eede09d14aecde44d116d396c2bc2"}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d392049468d4078ac680366ed3035a88ab8eede09d14aecde44d116d396c2bc2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d392049468d4078ac680366ed3035a88ab8eede09d14aecde44d116d396c2bc2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d392049468d4078ac680366ed3035a88ab8eede09d14aecde44d116d396c2bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec5319d492fa85717e22beb44e2af7b20c639d3df2d32a1f36a94f16aa676e0c"}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec5319d492fa85717e22beb44e2af7b20c639d3df2d32a1f36a94f16aa676e0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec5319d492fa85717e22beb44e2af7b20c639d3df2d32a1f36a94f16aa676e0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec5319d492fa85717e22beb44e2af7b20c639d3df2d32a1f36a94f16aa676e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d392049468d4078ac680366ed3035a88ab8eede09d14aecde44d116d396c2bc2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd"}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec5319d492fa85717e22beb44e2af7b20c639d3df2d32a1f36a94f16aa676e0c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3"}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T13:28:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d392049468d4078ac680366ed3035a88ab8eede09d14aecde44d116d396c2bc2"}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec5319d492fa85717e22beb44e2af7b20c639d3df2d32a1f36a94f16aa676e0c"}
{"level":"info","ts":"2026-07-20T13:28:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd"}
{"level":"info","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42652","PortSpecifier":{"PortValue":42652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d25cb93-377f-422f-b406-a4500adc8db7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42652","PortSpecifier":{"PortValue":42652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554122,"nanos":938192980},"http":{"id":"3d25cb93-377f-422f-b406-a4500adc8db7","method":"POST","headers":{":authority":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dcf7531e-b6af-4bd5-82a9-f9cb60611d46","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7467bed3-0f87-4e56-a20d-41a9d591d774"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bf39ad4a32b"]}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bf39ad4a32b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7467bed3-0f87-4e56-a20d-41a9d591d774"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dcf7531e-b6af-4bd5-82a9-f9cb60611d46","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7f57a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d25cb93-377f-422f-b406-a4500adc8db7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47406","PortSpecifier":{"PortValue":47406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b8383c.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47406","PortSpecifier":{"PortValue":47406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554122,"nanos":979482444},"http":{"id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","method":"POST","headers":{":authority":"e2e-shared-b-b8383c.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"dcf7531e-b6af-4bd5-82a9-f9cb60611d46","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=7467bed3-0f87-4e56-a20d-41a9d591d774"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bf39ad4a32b"]}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bf39ad4a32b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=7467bed3-0f87-4e56-a20d-41a9d591d774"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"dcf7531e-b6af-4bd5-82a9-f9cb60611d46","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5ac1a38a836cec6b5c292e5541e3d4888432ea806dc86af7929e35a3e0b05ba5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b8383c.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8383c/rate-test-model-b8383c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b8383c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f6bf3e8-e64c-4fd7-82f7-5a7d8d88b72e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42658","PortSpecifier":{"PortValue":42658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","method":"POST","path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions","host":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42658","PortSpecifier":{"PortValue":42658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554123,"nanos":14236614},"http":{"id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","method":"POST","headers":{":authority":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-f07hJgzf8DKT3KVT_v5mRHLGVYYpv7G6RH0Cjwb2sdvTVIvuDpAVVei2eTxG"}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-f07hJgzf8DKT3KVT_v5mRHLGVYYpv7G6RH0Cjwb2sdvTVIvuDpAVVei2eTxG\"}"}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"281b4539-f3b5-4a8b-8cf5-709dd14a5a28","keyName":"e2e-rate-a-4f41ec","subscription":"e2e-rate-iso-a-4f41ec","tenant":"e2e-shared-a-7f57a3","userId":"281b4539-f3b5-4a8b-8cf5-709dd14a5a28","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\",\"requestedSubscription\":\"e2e-rate-iso-a-4f41ec\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4f41ec","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"}}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7f57a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4f41ec"}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"281b4539-f3b5-4a8b-8cf5-709dd14a5a28","keyName":"e2e-rate-a-4f41ec","selected_subscription":"e2e-rate-iso-a-4f41ec","selected_subscription_key":"ai-tenant-e2e-shared-a-7f57a3/e2e-rate-iso-a-4f41ec@ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4f41ec","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"246f2d7e-c74a-4c34-b862-21058ab9ab29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42662","PortSpecifier":{"PortValue":42662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","method":"POST","path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions","host":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42662","PortSpecifier":{"PortValue":42662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554124,"nanos":52481756},"http":{"id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","method":"POST","headers":{":authority":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-f07hJgzf8DKT3KVT_v5mRHLGVYYpv7G6RH0Cjwb2sdvTVIvuDpAVVei2eTxG"}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-f07hJgzf8DKT3KVT_v5mRHLGVYYpv7G6RH0Cjwb2sdvTVIvuDpAVVei2eTxG\"}"}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"281b4539-f3b5-4a8b-8cf5-709dd14a5a28","keyName":"e2e-rate-a-4f41ec","subscription":"e2e-rate-iso-a-4f41ec","tenant":"e2e-shared-a-7f57a3","userId":"281b4539-f3b5-4a8b-8cf5-709dd14a5a28","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\",\"requestedSubscription\":\"e2e-rate-iso-a-4f41ec\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4f41ec","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"}}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7f57a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4f41ec"}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"281b4539-f3b5-4a8b-8cf5-709dd14a5a28","keyName":"e2e-rate-a-4f41ec","selected_subscription":"e2e-rate-iso-a-4f41ec","selected_subscription_key":"ai-tenant-e2e-shared-a-7f57a3/e2e-rate-iso-a-4f41ec@ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4f41ec","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bffc84e-0aa1-4aa5-8a9a-e2baf2b42d78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42674","PortSpecifier":{"PortValue":42674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","method":"POST","path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions","host":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42674","PortSpecifier":{"PortValue":42674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554125,"nanos":98460389},"http":{"id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","method":"POST","headers":{":authority":"e2e-shared-a-7f57a3.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-f07hJgzf8DKT3KVT_v5mRHLGVYYpv7G6RH0Cjwb2sdvTVIvuDpAVVei2eTxG"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-f07hJgzf8DKT3KVT_v5mRHLGVYYpv7G6RH0Cjwb2sdvTVIvuDpAVVei2eTxG\"}"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"281b4539-f3b5-4a8b-8cf5-709dd14a5a28","keyName":"e2e-rate-a-4f41ec","subscription":"e2e-rate-iso-a-4f41ec","tenant":"e2e-shared-a-7f57a3","userId":"281b4539-f3b5-4a8b-8cf5-709dd14a5a28","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\",\"requestedSubscription\":\"e2e-rate-iso-a-4f41ec\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7f57a3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4f41ec","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7f57a3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4f41ec"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"281b4539-f3b5-4a8b-8cf5-709dd14a5a28","keyName":"e2e-rate-a-4f41ec","selected_subscription":"e2e-rate-iso-a-4f41ec","selected_subscription_key":"ai-tenant-e2e-shared-a-7f57a3/e2e-rate-iso-a-4f41ec@ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7f57a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4f41ec","namespace":"ai-tenant-e2e-shared-a-7f57a3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7f57a3/rate-test-model-7f57a3"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97a1f2dd-6eab-4f66-a4d5-17d5695ce95c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47422","PortSpecifier":{"PortValue":47422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","method":"POST","path":"/ai-tenant-e2e-shared-b-b8383c/rate-test-model-b8383c/v1/completions","host":"e2e-shared-b-b8383c.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47422","PortSpecifier":{"PortValue":47422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784554125,"nanos":137580281},"http":{"id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","method":"POST","headers":{":authority":"e2e-shared-b-b8383c.apps.8daed40e-8082-496a-9e32-2bf39ad4a32b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b8383c/rate-test-model-b8383c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4AWEOQj039Y3vemh_wF1zSHQIlHXmzIroMlHqhmuwoJRGNST4bqugfoTxyLe"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b8383c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4AWEOQj039Y3vemh_wF1zSHQIlHXmzIroMlHqhmuwoJRGNST4bqugfoTxyLe\"}"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b8383c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c6e49e3-e46b-4aaa-9d2e-8a2270fae9ba","keyName":"e2e-rate-b-4f41ec","subscription":"e2e-rate-iso-b-4f41ec","tenant":"e2e-shared-b-b8383c","userId":"7c6e49e3-e46b-4aaa-9d2e-8a2270fae9ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b8383c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b8383c/rate-test-model-b8383c\",\"requestedSubscription\":\"e2e-rate-iso-b-4f41ec\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b8383c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b8383c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4f41ec","namespace":"ai-tenant-e2e-shared-b-b8383c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b8383c/rate-test-model-b8383c"}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b8383c/rate-test-model-b8383c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b8383c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4f41ec"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c6e49e3-e46b-4aaa-9d2e-8a2270fae9ba","keyName":"e2e-rate-b-4f41ec","selected_subscription":"e2e-rate-iso-b-4f41ec","selected_subscription_key":"ai-tenant-e2e-shared-b-b8383c/e2e-rate-iso-b-4f41ec@ai-tenant-e2e-shared-b-b8383c/rate-test-model-b8383c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b8383c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4f41ec","namespace":"ai-tenant-e2e-shared-b-b8383c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-b8383c/rate-test-model-b8383c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T13:28:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"829cdcd3-c3fd-4067-a5e3-1a1f065c9ffb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec5319d492fa85717e22beb44e2af7b20c639d3df2d32a1f36a94f16aa676e0c"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3370068c9b9f66a85323ebc543ba28ed98385ab6738da0efe0da878e0d8ef01"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7972fa4145d194743dd94de427b4f1926e4b3f23c9a0f20e03385724a73cb874"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8b60518de554e55f442c4d79d3423d1602270806ba84cb5754cfd79093e1576"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/635375c04e6fe4a4208349dc730006b64af6dc518e81df4ec2756c90e99187b3"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3123c18697bcbf90ed786d04c26e3d5ade20e945992b663693015fb9bcf4840"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d74119624e5f54cf5deee3d8744f55edb2810aa3ff3fa227553986bcdc9bdf7a"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5fcf3b47d46540233f53565944449d643d9c1b03d7100b9dc9dbd917022c92b"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ce49ac24699811f013764b8df3d6c6bd49a36a8f5112db38811a867c56122e2"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44275ae3bebc9d8d6d024fe1a34bbe0e98f93a5f5d8d4d1bc579d8e27ee98281"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18fd551971a7712ab0a67f2b8ff979b827c0c75114d6f6c31fd4d5eb8c073a15"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c29a2cacdc9cc5f5ad7ed263d7bdcd0d1cc05c397817d48284c8bd752421c153"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b49b186983bf5dd15900e903b6c017a9b8be63eb84864d6296a8e3b1cc4f6f7"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34d30ce7cfaacf652bd57b741bb0546975eaded486c68d4c343e1856f63a9699"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b5dd2ba48f05e31369139b1285471c354cd5a4fa8271528e2bf63ca8ea28a1e"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d392049468d4078ac680366ed3035a88ab8eede09d14aecde44d116d396c2bc2"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84fc0bf44bbf479a6762c78264442be893741b92f9fc695b0a9941c4a522642e"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e8d32fb3f99fef89bf25087a650d33d363c38286da6d490599c5c478b0d3a23"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/345d0da26d6d34a7f7f2cacbf28fdede3595e1e271b2ce747a424888df006b51"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3deaba9d0fc3e8502f536fd08591e3b09445a66b4781af255b813490ced06d3e"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f75ac52c2ca6eec7822962e443a8a95f79f8e60eddbf3250e9fbdac8ceff34f"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0f83ceeecf84ecbe604f2c142f32fc7f31906acbb5f1e1c8e5d533ed5dc4ddd"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3abb39b2eafd418aacbc7fd63beb3c1f8740d23d5b9a3ef8c6aec152f011fac8"}
{"level":"info","ts":"2026-07-20T13:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ac1a38a836cec6b5c292e5541e3d4888432ea806dc86af7929e35a3e0b05ba5"}