--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d47a5a5b7a74b682c9b20a70ea1d44d59fbfa935e46bba04bd9d309c8e317d"}
{"level":"error","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e"}
{"level":"error","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e"}
{"level":"debug","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"}
{"level":"error","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268"}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268"}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4"}
{"level":"error","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4"}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f"}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f"}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027"}
{"level":"error","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27e43a36ab3e7626831b95421320a75c5070de17fe350f3875a001e8112126d"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27e43a36ab3e7626831b95421320a75c5070de17fe350f3875a001e8112126d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b27e43a36ab3e7626831b95421320a75c5070de17fe350f3875a001e8112126d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27e43a36ab3e7626831b95421320a75c5070de17fe350f3875a001e8112126d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27e43a36ab3e7626831b95421320a75c5070de17fe350f3875a001e8112126d"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b27e43a36ab3e7626831b95421320a75c5070de17fe350f3875a001e8112126d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"}
{"level":"info","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"}
{"level":"debug","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"}
{"level":"info","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"}
{"level":"debug","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45"}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45"}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45"}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28"}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28"}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45"}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28"}
{"level":"debug","ts":"2026-07-13T07:46:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc"}
{"level":"error","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c841098dadcef66322c39feb56a163650b6317903588d7ced11cb2227c64c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c841098dadcef66322c39feb56a163650b6317903588d7ced11cb2227c64c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c841098dadcef66322c39feb56a163650b6317903588d7ced11cb2227c64c"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"788c841098dadcef66322c39feb56a163650b6317903588d7ced11cb2227c64c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["788c841098dadcef66322c39feb56a163650b6317903588d7ced11cb2227c64c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"788c841098dadcef66322c39feb56a163650b6317903588d7ced11cb2227c64c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c841098dadcef66322c39feb56a163650b6317903588d7ced11cb2227c64c"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"788c841098dadcef66322c39feb56a163650b6317903588d7ced11cb2227c64c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/788c841098dadcef66322c39feb56a163650b6317903588d7ced11cb2227c64c"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1"}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"}
{"level":"debug","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"}
{"level":"debug","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:46:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:46:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"}
{"level":"debug","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"}
{"level":"debug","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:46:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:46:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:46:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"}
{"level":"info","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36682","PortSpecifier":{"PortValue":36682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36682","PortSpecifier":{"PortValue":36682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928780,"nanos":117420957},"http":{"id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7723784d-fa5c-4e5d-ae68-04ef3aebf821","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59434","PortSpecifier":{"PortValue":59434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59434","PortSpecifier":{"PortValue":59434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928780,"nanos":170960808},"http":{"id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/auth-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"238351c4-612f-45d2-bbfb-eaaaba0b2575","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36692","PortSpecifier":{"PortValue":36692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","method":"GET","path":"/maas-api/v1/api-keys/7ab486c2-832a-4522-b888-64b1059d38aa","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36692","PortSpecifier":{"PortValue":36692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928780,"nanos":241992546},"http":{"id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","method":"GET","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7ab486c2-832a-4522-b888-64b1059d38aa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7ab486c2-832a-4522-b888-64b1059d38aa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2903ea61-ce05-4bc7-ab4f-c6ee296f844f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352aeb79-9c1a-4625-b257-959aaa009566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59436","PortSpecifier":{"PortValue":59436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"352aeb79-9c1a-4625-b257-959aaa009566","method":"GET","path":"/maas-api/v1/api-keys/c2255bc9-d2e7-41c1-8d5e-37d632ea661c","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"352aeb79-9c1a-4625-b257-959aaa009566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59436","PortSpecifier":{"PortValue":59436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928780,"nanos":284607065},"http":{"id":"352aeb79-9c1a-4625-b257-959aaa009566","method":"GET","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c2255bc9-d2e7-41c1-8d5e-37d632ea661c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"352aeb79-9c1a-4625-b257-959aaa009566","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"352aeb79-9c1a-4625-b257-959aaa009566","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"352aeb79-9c1a-4625-b257-959aaa009566","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c2255bc9-d2e7-41c1-8d5e-37d632ea661c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352aeb79-9c1a-4625-b257-959aaa009566","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352aeb79-9c1a-4625-b257-959aaa009566","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"352aeb79-9c1a-4625-b257-959aaa009566","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/auth-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"352aeb79-9c1a-4625-b257-959aaa009566","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352aeb79-9c1a-4625-b257-959aaa009566","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"352aeb79-9c1a-4625-b257-959aaa009566","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352aeb79-9c1a-4625-b257-959aaa009566","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:46:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"352aeb79-9c1a-4625-b257-959aaa009566","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37022","PortSpecifier":{"PortValue":37022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37022","PortSpecifier":{"PortValue":37022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928797,"nanos":283380159},"http":{"id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e4c216a-461a-43d7-be5f-2e855ad43bb0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83ff16dc-5713-470b-b712-5da6431f755b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48578","PortSpecifier":{"PortValue":48578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83ff16dc-5713-470b-b712-5da6431f755b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83ff16dc-5713-470b-b712-5da6431f755b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48578","PortSpecifier":{"PortValue":48578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928797,"nanos":318273107},"http":{"id":"83ff16dc-5713-470b-b712-5da6431f755b","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83ff16dc-5713-470b-b712-5da6431f755b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83ff16dc-5713-470b-b712-5da6431f755b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83ff16dc-5713-470b-b712-5da6431f755b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ff16dc-5713-470b-b712-5da6431f755b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ff16dc-5713-470b-b712-5da6431f755b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83ff16dc-5713-470b-b712-5da6431f755b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/auth-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83ff16dc-5713-470b-b712-5da6431f755b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83ff16dc-5713-470b-b712-5da6431f755b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83ff16dc-5713-470b-b712-5da6431f755b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83ff16dc-5713-470b-b712-5da6431f755b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83ff16dc-5713-470b-b712-5da6431f755b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37032","PortSpecifier":{"PortValue":37032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:37032","PortSpecifier":{"PortValue":37032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928797,"nanos":360676474},"http":{"id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","method":"GET","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AQ5p9KHNWUwBWdZu_3na3QoYX5BxbGwJzJSIDijqVM3v1L2rhwlYv0DTy6aM"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AQ5p9KHNWUwBWdZu_3na3QoYX5BxbGwJzJSIDijqVM3v1L2rhwlYv0DTy6aM\"}"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b1cda64b-ee88-4df8-98a1-dcdba01c64e9","keyName":"e2e-auth-iso-a-d76005","subscription":"e2e-auth-iso-cccbf2","tenant":"e2e-shared-a-db7d2d","userId":"b1cda64b-ee88-4df8-98a1-dcdba01c64e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-cccbf2"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:46:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58e66b43-5d07-49ed-9c1d-bf0a2953b959","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34896","PortSpecifier":{"PortValue":34896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34896","PortSpecifier":{"PortValue":34896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928812,"nanos":333791196},"http":{"id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bceab30-7eaf-4a3d-9c8e-2621806522f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01486f35-af59-4508-8736-7db403d6eee9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41654","PortSpecifier":{"PortValue":41654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01486f35-af59-4508-8736-7db403d6eee9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01486f35-af59-4508-8736-7db403d6eee9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41654","PortSpecifier":{"PortValue":41654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928812,"nanos":379585390},"http":{"id":"01486f35-af59-4508-8736-7db403d6eee9","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01486f35-af59-4508-8736-7db403d6eee9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01486f35-af59-4508-8736-7db403d6eee9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01486f35-af59-4508-8736-7db403d6eee9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01486f35-af59-4508-8736-7db403d6eee9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01486f35-af59-4508-8736-7db403d6eee9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01486f35-af59-4508-8736-7db403d6eee9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/auth-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01486f35-af59-4508-8736-7db403d6eee9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01486f35-af59-4508-8736-7db403d6eee9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01486f35-af59-4508-8736-7db403d6eee9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01486f35-af59-4508-8736-7db403d6eee9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01486f35-af59-4508-8736-7db403d6eee9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41662","PortSpecifier":{"PortValue":41662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41662","PortSpecifier":{"PortValue":41662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928812,"nanos":429830225},"http":{"id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","method":"GET","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cz8dgtb2ornm6FVD_FI6GTiVi8O65RRNXy8FFfmjt7d8flcJuDbT4SWZ7JSO"}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-da56f9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cz8dgtb2ornm6FVD_FI6GTiVi8O65RRNXy8FFfmjt7d8flcJuDbT4SWZ7JSO\"}"}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-da56f9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-13T07:46:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ddbcf2d-e3d8-4304-b014-3999239588c9","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53914","PortSpecifier":{"PortValue":53914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6715ab99-cd60-4640-8bb9-b11819ad7399","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53914","PortSpecifier":{"PortValue":53914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928827,"nanos":383033242},"http":{"id":"6715ab99-cd60-4640-8bb9-b11819ad7399","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6715ab99-cd60-4640-8bb9-b11819ad7399","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36192","PortSpecifier":{"PortValue":36192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d65d26b0-af42-421e-8af5-aba25141c4a5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36192","PortSpecifier":{"PortValue":36192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928827,"nanos":420757200},"http":{"id":"d65d26b0-af42-421e-8af5-aba25141c4a5","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/auth-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d65d26b0-af42-421e-8af5-aba25141c4a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40694","PortSpecifier":{"PortValue":40694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40694","PortSpecifier":{"PortValue":40694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928827,"nanos":479500527},"http":{"id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ce2076a-4baf-4ed2-b5a9-44cdd21f819e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48584","PortSpecifier":{"PortValue":48584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48584","PortSpecifier":{"PortValue":48584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928827,"nanos":519885094},"http":{"id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/auth-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"facea5b9-4d69-4c8a-ac89-f53544fdb1c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45318","PortSpecifier":{"PortValue":45318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45318","PortSpecifier":{"PortValue":45318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928842,"nanos":408183550},"http":{"id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f975a8b-6d71-4261-aab9-6f5e0d2dcc18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49428","PortSpecifier":{"PortValue":49428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49428","PortSpecifier":{"PortValue":49428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928842,"nanos":469457932},"http":{"id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/auth-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbd6c57f-769b-4fc2-a013-605fa1a9b620","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49434","PortSpecifier":{"PortValue":49434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a14ab482-df46-4187-ae9c-d41bc445419a","method":"GET","path":"/maas-api/v1/api-keys/7e995e3e-0ce0-40d3-9c61-615363599aae","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49434","PortSpecifier":{"PortValue":49434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928842,"nanos":506298478},"http":{"id":"a14ab482-df46-4187-ae9c-d41bc445419a","method":"GET","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7e995e3e-0ce0-40d3-9c61-615363599aae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7e995e3e-0ce0-40d3-9c61-615363599aae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/auth-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a14ab482-df46-4187-ae9c-d41bc445419a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45322","PortSpecifier":{"PortValue":45322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c16105c8-7d9c-4a13-a688-23697cf9e662","method":"GET","path":"/maas-api/v1/api-keys/7e995e3e-0ce0-40d3-9c61-615363599aae","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:45322","PortSpecifier":{"PortValue":45322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928842,"nanos":535662377},"http":{"id":"c16105c8-7d9c-4a13-a688-23697cf9e662","method":"GET","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7e995e3e-0ce0-40d3-9c61-615363599aae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7e995e3e-0ce0-40d3-9c61-615363599aae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c16105c8-7d9c-4a13-a688-23697cf9e662","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43304","PortSpecifier":{"PortValue":43304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43304","PortSpecifier":{"PortValue":43304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928857,"nanos":392546953},"http":{"id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd7ff848-750e-4ed9-962c-1b1165ac0edf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60104","PortSpecifier":{"PortValue":60104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60104","PortSpecifier":{"PortValue":60104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928857,"nanos":430668609},"http":{"id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/auth-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"178a25e7-f89c-40ee-b8d6-cbd8cf3a4e25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"653a847a-6729-4522-b342-377971ec5067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53400","PortSpecifier":{"PortValue":53400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"653a847a-6729-4522-b342-377971ec5067","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"653a847a-6729-4522-b342-377971ec5067","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:53400","PortSpecifier":{"PortValue":53400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928857,"nanos":466603316},"http":{"id":"653a847a-6729-4522-b342-377971ec5067","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"653a847a-6729-4522-b342-377971ec5067","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XPxPkclpmcr4w49H_3Cdu3XTagZdO3euNY51egQnQEpohLbEpohnCLESYN0o"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"653a847a-6729-4522-b342-377971ec5067","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XPxPkclpmcr4w49H_3Cdu3XTagZdO3euNY51egQnQEpohLbEpohnCLESYN0o\"}"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"653a847a-6729-4522-b342-377971ec5067","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"febd6e90-d671-4b75-9601-7bfd5787baff","keyName":"e2e-auth-iso-a-2d41a4","subscription":"e2e-auth-iso-680397","tenant":"e2e-shared-a-db7d2d","userId":"febd6e90-d671-4b75-9601-7bfd5787baff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"653a847a-6729-4522-b342-377971ec5067","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653a847a-6729-4522-b342-377971ec5067","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653a847a-6729-4522-b342-377971ec5067","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"653a847a-6729-4522-b342-377971ec5067","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/auth-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"653a847a-6729-4522-b342-377971ec5067","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653a847a-6729-4522-b342-377971ec5067","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653a847a-6729-4522-b342-377971ec5067","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-680397"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"653a847a-6729-4522-b342-377971ec5067","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"653a847a-6729-4522-b342-377971ec5067","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:47:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"653a847a-6729-4522-b342-377971ec5067","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:47:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/885681375e50dddc81e5fac857c18cf94600be67c60940a246d3ddd420c77a45"}
{"level":"info","ts":"2026-07-13T07:47:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4511bfb0b04be9bba98239a78eb7c1601e92fa3cf7789ca7082b2b149371027"}
{"level":"info","ts":"2026-07-13T07:47:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56f0f935ca70ae884b7d557a2866a01c4290bb6798cd834b5426280ad0e369cc"}
{"level":"info","ts":"2026-07-13T07:47:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44569dfdb718dce22dd89c62f2d24239ceb808b4f621328a858d21f8905d33de"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb0e199da0fb5fb534fcf146817a217a98ccf82c2de211e4cfe562558d3a13e"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/788c841098dadcef66322c39feb56a163650b6317903588d7ced11cb2227c64c"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77936b3036dd2c5687487ade03c5fc204d3e7ab5f34e069cec621ca4c31a301f"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9689fa345f06e2d6f51ba990a2de638051dfd4ff61fb102f03d516068b8c87b8"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3d47a5a5b7a74b682c9b20a70ea1d44d59fbfa935e46bba04bd9d309c8e317d"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92011cceffa713029b605c6ddd978ff3968eb5b2c55ed30a78ed566e090f8e78"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b27e43a36ab3e7626831b95421320a75c5070de17fe350f3875a001e8112126d"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7670e59b471f5a3078286cf1e8db0175068066c9ff03debea2769b249008489e"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3fd74f8ee69a9b22d4430492b3ed71f5897c0ae27da6926342fa3cc281f9268"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1d661706dfc52d8ae2f7fc5560429171ee297ed274c118086d53a8c54ac01a1"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c82d366f6f48c6c77fbd4bc4da08b1eafc0a99ea3a7594b673e71eb70cd98b38"}
{"level":"info","ts":"2026-07-13T07:47:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/379700b0923fddb2c67b1c44cfb17f05c1801b4a03a7236a86a94f2b94114a28"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085"}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"debug","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"debug","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"debug","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"debug","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"}
{"level":"error","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:48:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"error","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a"}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"info","ts":"2026-07-13T07:48:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085"}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4"}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"info","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c"}
{"level":"debug","ts":"2026-07-13T07:48:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:48:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d"}
{"level":"debug","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"}
{"level":"info","ts":"2026-07-13T07:48:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290"}
{"level":"info","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33950","PortSpecifier":{"PortValue":33950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28783eaf-8d92-41ac-955f-f8d969bd5198","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33950","PortSpecifier":{"PortValue":33950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928922,"nanos":933495035},"http":{"id":"28783eaf-8d92-41ac-955f-f8d969bd5198","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/sub-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28783eaf-8d92-41ac-955f-f8d969bd5198","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38264","PortSpecifier":{"PortValue":38264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38264","PortSpecifier":{"PortValue":38264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928922,"nanos":977229189},"http":{"id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/sub-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:48:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae080f5-0dbf-43c0-9e45-d73ccf159d8b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33962","PortSpecifier":{"PortValue":33962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de762add-298a-4eb2-b5a4-b0a26be356fb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33962","PortSpecifier":{"PortValue":33962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928923,"nanos":14175215},"http":{"id":"de762add-298a-4eb2-b5a4-b0a26be356fb","method":"GET","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tR2bObe1iv5xEIuU_j9LEVmwry3llkmMk9PUaNcSv56b90KApbTYyn5kosbw"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tR2bObe1iv5xEIuU_j9LEVmwry3llkmMk9PUaNcSv56b90KApbTYyn5kosbw\"}"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ffdad19-906c-4efc-b86f-90c13417e44f","keyName":"e2e-sub-iso-c1a31f","subscription":"e2e-a-only-bbf18a","tenant":"e2e-shared-a-db7d2d","userId":"0ffdad19-906c-4efc-b86f-90c13417e44f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/sub-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-bbf18a"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de762add-298a-4eb2-b5a4-b0a26be356fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38272","PortSpecifier":{"PortValue":38272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38272","PortSpecifier":{"PortValue":38272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928923,"nanos":56509877},"http":{"id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","method":"GET","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T7xDJxEpm93pw5eJ_Pe9iepIFAycXvDiwc6bWVBJw4YcBM0JiLmvCwTEeha4"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-da56f9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T7xDJxEpm93pw5eJ_Pe9iepIFAycXvDiwc6bWVBJw4YcBM0JiLmvCwTEeha4\"}"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-da56f9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d6782c3-63d9-40bb-ac33-ba798770be11","keyName":"e2e-sub-iso-ee260f","subscription":"e2e-b-only-bbf18a","tenant":"e2e-shared-b-da56f9","userId":"8d6782c3-63d9-40bb-ac33-ba798770be11","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/sub-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-bbf18a"}
{"level":"info","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:48:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18d92b7b-010d-4e54-960f-3de3dcedbac9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60874","PortSpecifier":{"PortValue":60874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60874","PortSpecifier":{"PortValue":60874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928939,"nanos":179164708},"http":{"id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/sub-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cefdfe7c-9caa-4c16-82a1-1c535de58d06","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41252","PortSpecifier":{"PortValue":41252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41252","PortSpecifier":{"PortValue":41252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928939,"nanos":214916808},"http":{"id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/sub-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b4d9d06-ac4f-4434-be9d-2a33bb5374bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60888","PortSpecifier":{"PortValue":60888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60888","PortSpecifier":{"PortValue":60888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928939,"nanos":250122113},"http":{"id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ynBMLVZvOkN3JerQ_nj9e1FfWDL5KqA94QbpszNmQReqTKCp0W2eUZIDY8K1"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ynBMLVZvOkN3JerQ_nj9e1FfWDL5KqA94QbpszNmQReqTKCp0W2eUZIDY8K1\"}"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c2122e-34ee-474a-a68c-3ec37cdfadad","keyName":"e2e-sub-iso-f5f51d","subscription":"e2e-shared-sub-4cc5fd","tenant":"e2e-shared-a-db7d2d","userId":"45c2122e-34ee-474a-a68c-3ec37cdfadad","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/sub-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4cc5fd"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f10d8bf0-076f-4e25-b738-37ef5aa78cde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41260","PortSpecifier":{"PortValue":41260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41260","PortSpecifier":{"PortValue":41260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928939,"nanos":287318793},"http":{"id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Xi1DbwDpoioC8wUz_Ks8NUMsv59qkFUP9Ht5djDPL2j0KaeKEoOHdOsuYwov"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-da56f9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Xi1DbwDpoioC8wUz_Ks8NUMsv59qkFUP9Ht5djDPL2j0KaeKEoOHdOsuYwov\"}"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-da56f9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c03a575a-0461-4bb6-b747-bffa8595b444","keyName":"e2e-sub-iso-f1a7c1","subscription":"e2e-shared-sub-4cc5fd","tenant":"e2e-shared-b-da56f9","userId":"c03a575a-0461-4bb6-b747-bffa8595b444","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/sub-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4cc5fd"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:48:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a8ddb17-0dfd-44e8-9b87-1f24dcb30ecc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43baa548880410854c4cbdc1878387eb41561e5f574450cc460b51dea0062e3c"}
{"level":"info","ts":"2026-07-13T07:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e684e59ec06cf927d2937bbf1c44f0679b506ebbf12bfe90e71fa3bac33448e8"}
{"level":"info","ts":"2026-07-13T07:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c55a32652088f1c5cd6b9c67b23d88371d4aecf1bfd6584956be3014dd76b23"}
{"level":"info","ts":"2026-07-13T07:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b658300bebf30c4a3db8f7115200a3da2e01f0e61f0eb2308950a5192cb9a79a"}
{"level":"info","ts":"2026-07-13T07:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5db111f253e5e286c502ded6e6795790015a4f7f1c1fa416b2111a67770ecb6d"}
{"level":"info","ts":"2026-07-13T07:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6d5043de65905fb989c597caf092937bf05c928093a305c5bb08f21664eacdb"}
{"level":"info","ts":"2026-07-13T07:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6497bff127ed444c0559e1a64831403da99be279aa4af63bbcac28f15c9702e2"}
{"level":"info","ts":"2026-07-13T07:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56b69af1254e04912c712a55068342b30e3b8b7fb45e5b1c3d4088918117779d"}
{"level":"info","ts":"2026-07-13T07:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e9783ef7acf2801cdc08c3769e5da0af3abc54b39152f28a63c877885010dd0"}
{"level":"info","ts":"2026-07-13T07:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdb86a5f7ca63e0b995fe52a8653b4ea60143f0ab961a455db6d76e82698ee3d"}
{"level":"info","ts":"2026-07-13T07:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb34778e742923cb6eba39fa3b14a36c70402bdc5483aa70c9b941605bd1a27c"}
{"level":"info","ts":"2026-07-13T07:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07cae20c3e2ff6d439ccd708ff2556ca2c6cbd1d32d0030aac14c062fe646417"}
{"level":"info","ts":"2026-07-13T07:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fb23b54eda592b0abfa83c7e6c2b91e5e1b0c21a5afdb4d7687365e26926085"}
{"level":"info","ts":"2026-07-13T07:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c551040c0c24cfc125c4a83d583805ab73126169cbbfe09fa9d9b78f66ece8a5"}
{"level":"info","ts":"2026-07-13T07:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7deb3b1b91402d8401b14f07c1849a33eac6e8be41e82af236292eb39514290"}
{"level":"info","ts":"2026-07-13T07:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e58aa582f4bacaf2bde498e03f8cfb13dbfe4992d45c3838826a2657c88dc562"}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393"}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393"}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393"}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85"}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85"}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6"}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3"}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519"}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5"}
{"level":"debug","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"}
{"level":"debug","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5"}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21"}
{"level":"error","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21"}
{"level":"debug","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21"}
{"level":"debug","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21"}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409"}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409"}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409"}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd"}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd"}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364"}
{"level":"error","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"}
{"level":"error","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85"}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb"}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd"}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"}
{"level":"info","ts":"2026-07-13T07:49:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393"}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3"}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T07:49:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21"}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3"}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5"}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364"}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519"}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6"}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409"}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4"}
{"level":"debug","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4"}
{"level":"info","ts":"2026-07-13T07:49:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6"}
{"level":"info","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39508","PortSpecifier":{"PortValue":39508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39508","PortSpecifier":{"PortValue":39508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928994,"nanos":728815115},"http":{"id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d8f06ed-2ce8-4894-88b5-6fcbdf0cc49a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60978","PortSpecifier":{"PortValue":60978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d95a9e06-461c-4438-85da-7c82c7a50c28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60978","PortSpecifier":{"PortValue":60978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928994,"nanos":777809305},"http":{"id":"d95a9e06-461c-4438-85da-7c82c7a50c28","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/rate-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d95a9e06-461c-4438-85da-7c82c7a50c28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39522","PortSpecifier":{"PortValue":39522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1691e555-3fe9-4d90-b86f-855766f48dd4","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39522","PortSpecifier":{"PortValue":39522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928994,"nanos":817597757},"http":{"id":"1691e555-3fe9-4d90-b86f-855766f48dd4","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-136tRJN2jHbiU8FiF_vk6toCbrB3DyzIQHlZxzRd9CVHfKP2YsRbdIgYfd5fZ"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-136tRJN2jHbiU8FiF_vk6toCbrB3DyzIQHlZxzRd9CVHfKP2YsRbdIgYfd5fZ\"}"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3af2cd4c-ea27-498b-b840-dc57888e69aa","keyName":"e2e-rate-a-1f548e","subscription":"e2e-rate-iso-a-1f548e","tenant":"e2e-shared-a-db7d2d","userId":"3af2cd4c-ea27-498b-b840-dc57888e69aa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-1f548e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f548e","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1f548e"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3af2cd4c-ea27-498b-b840-dc57888e69aa","keyName":"e2e-rate-a-1f548e","selected_subscription":"e2e-rate-iso-a-1f548e","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-1f548e@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f548e","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:49:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1691e555-3fe9-4d90-b86f-855766f48dd4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39532","PortSpecifier":{"PortValue":39532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39532","PortSpecifier":{"PortValue":39532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928995,"nanos":874095309},"http":{"id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-136tRJN2jHbiU8FiF_vk6toCbrB3DyzIQHlZxzRd9CVHfKP2YsRbdIgYfd5fZ"}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-136tRJN2jHbiU8FiF_vk6toCbrB3DyzIQHlZxzRd9CVHfKP2YsRbdIgYfd5fZ\"}"}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3af2cd4c-ea27-498b-b840-dc57888e69aa","keyName":"e2e-rate-a-1f548e","subscription":"e2e-rate-iso-a-1f548e","tenant":"e2e-shared-a-db7d2d","userId":"3af2cd4c-ea27-498b-b840-dc57888e69aa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-1f548e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f548e","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1f548e"}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3af2cd4c-ea27-498b-b840-dc57888e69aa","keyName":"e2e-rate-a-1f548e","selected_subscription":"e2e-rate-iso-a-1f548e","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-1f548e@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f548e","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:49:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d49d9388-45b9-47ef-ac26-bc9a60a77c0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39536","PortSpecifier":{"PortValue":39536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f5e5022-7b5b-46a8-981f-600e2325a740","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39536","PortSpecifier":{"PortValue":39536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783928996,"nanos":914247653},"http":{"id":"4f5e5022-7b5b-46a8-981f-600e2325a740","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-136tRJN2jHbiU8FiF_vk6toCbrB3DyzIQHlZxzRd9CVHfKP2YsRbdIgYfd5fZ"}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-136tRJN2jHbiU8FiF_vk6toCbrB3DyzIQHlZxzRd9CVHfKP2YsRbdIgYfd5fZ\"}"}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3af2cd4c-ea27-498b-b840-dc57888e69aa","keyName":"e2e-rate-a-1f548e","subscription":"e2e-rate-iso-a-1f548e","tenant":"e2e-shared-a-db7d2d","userId":"3af2cd4c-ea27-498b-b840-dc57888e69aa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-1f548e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f548e","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1f548e"}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3af2cd4c-ea27-498b-b840-dc57888e69aa","keyName":"e2e-rate-a-1f548e","selected_subscription":"e2e-rate-iso-a-1f548e","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-1f548e@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f548e","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:49:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f5e5022-7b5b-46a8-981f-600e2325a740","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59182","PortSpecifier":{"PortValue":59182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59182","PortSpecifier":{"PortValue":59182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929003,"nanos":637685568},"http":{"id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2d07fbf-462b-4dcc-aa69-cecaf53be07a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33270","PortSpecifier":{"PortValue":33270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33270","PortSpecifier":{"PortValue":33270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929003,"nanos":708411508},"http":{"id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"]}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/29a38588247b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=4add8de9-face-4c78-b329-0e0016db67d9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f58aa03d-a15b-42c1-9704-849dc2b702e1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/rate-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac62c9ef-87df-408f-86ac-c9b7ebf5525a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59192","PortSpecifier":{"PortValue":59192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3edc99e2-066a-4186-9520-b161d48a8e80","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59192","PortSpecifier":{"PortValue":59192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929003,"nanos":752997565},"http":{"id":"3edc99e2-066a-4186-9520-b161d48a8e80","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3edc99e2-066a-4186-9520-b161d48a8e80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59204","PortSpecifier":{"PortValue":59204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59204","PortSpecifier":{"PortValue":59204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929004,"nanos":801417640},"http":{"id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab3c30c3-dd5e-4cfc-8762-c3fd7a056c7e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59216","PortSpecifier":{"PortValue":59216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59216","PortSpecifier":{"PortValue":59216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929005,"nanos":845884622},"http":{"id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd8261b4-b55c-4435-9693-3bc9d409fcbc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59222","PortSpecifier":{"PortValue":59222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59222","PortSpecifier":{"PortValue":59222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929006,"nanos":888397600},"http":{"id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f2f5141-5bbf-4ade-bd95-4e148f5f3be0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34218","PortSpecifier":{"PortValue":34218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e17808fa-ad44-4b4d-92bd-360e64722037","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34218","PortSpecifier":{"PortValue":34218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929007,"nanos":937464490},"http":{"id":"e17808fa-ad44-4b4d-92bd-360e64722037","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e17808fa-ad44-4b4d-92bd-360e64722037","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34228","PortSpecifier":{"PortValue":34228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1243438-c89b-429e-9f81-b0200fdad4b5","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34228","PortSpecifier":{"PortValue":34228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929008,"nanos":985060557},"http":{"id":"d1243438-c89b-429e-9f81-b0200fdad4b5","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1243438-c89b-429e-9f81-b0200fdad4b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34240","PortSpecifier":{"PortValue":34240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34240","PortSpecifier":{"PortValue":34240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929010,"nanos":22146924},"http":{"id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46bbc558-2846-4347-a0ac-06f5d20fc9d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2236004e-7ae3-4574-9872-f369372b68f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34250","PortSpecifier":{"PortValue":34250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2236004e-7ae3-4574-9872-f369372b68f4","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2236004e-7ae3-4574-9872-f369372b68f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34250","PortSpecifier":{"PortValue":34250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929011,"nanos":57236657},"http":{"id":"2236004e-7ae3-4574-9872-f369372b68f4","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2236004e-7ae3-4574-9872-f369372b68f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2236004e-7ae3-4574-9872-f369372b68f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2236004e-7ae3-4574-9872-f369372b68f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2236004e-7ae3-4574-9872-f369372b68f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34258","PortSpecifier":{"PortValue":34258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34258","PortSpecifier":{"PortValue":34258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929012,"nanos":95479971},"http":{"id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01a0b836-a429-47ae-a5a6-0fc7451e3a2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34268","PortSpecifier":{"PortValue":34268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f362356a-6ac2-4290-8270-dc71b1f3b660","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34268","PortSpecifier":{"PortValue":34268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929013,"nanos":136097983},"http":{"id":"f362356a-6ac2-4290-8270-dc71b1f3b660","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f362356a-6ac2-4290-8270-dc71b1f3b660","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34278","PortSpecifier":{"PortValue":34278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","method":"POST","path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions","host":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34278","PortSpecifier":{"PortValue":34278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929014,"nanos":175202263},"http":{"id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","method":"POST","headers":{":authority":"e2e-shared-a-db7d2d.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Przo7U8bA7qglfZa_9TaONVO2uUy5OOYyJbMQCkkomTZ7mkAPl8dpFgqqlOG\"}"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","subscription":"e2e-rate-iso-a-708da3","tenant":"e2e-shared-a-db7d2d","userId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\",\"requestedSubscription\":\"e2e-rate-iso-a-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-db7d2d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45c4ab47-d4c3-4fcb-b0f0-340e39c7a58b","keyName":"e2e-rate-a-708da3","selected_subscription":"e2e-rate-iso-a-708da3","selected_subscription_key":"ai-tenant-e2e-shared-a-db7d2d/e2e-rate-iso-a-708da3@ai-tenant-e2e-shared-a-db7d2d/rate-test-model-db7d2d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-db7d2d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-708da3","namespace":"ai-tenant-e2e-shared-a-db7d2d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e75d3be1-2ac0-434d-a25d-358b1320ec63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51168","PortSpecifier":{"PortValue":51168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a172ea6e-ed45-4804-8127-d87e3a127bff","method":"POST","path":"/ai-tenant-e2e-shared-b-da56f9/rate-test-model-da56f9/v1/completions","host":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51168","PortSpecifier":{"PortValue":51168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783929014,"nanos":217193697},"http":{"id":"a172ea6e-ed45-4804-8127-d87e3a127bff","method":"POST","headers":{":authority":"e2e-shared-b-da56f9.apps.359df62d-94a9-4158-b718-29a38588247b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-da56f9/rate-test-model-da56f9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19afQqv82m92g5Uok_FjRli382OQ92aNoc0gSUiTDnaU1SSbXFS1SOIn7ZYcq"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-da56f9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19afQqv82m92g5Uok_FjRli382OQ92aNoc0gSUiTDnaU1SSbXFS1SOIn7ZYcq\"}"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-da56f9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e78cddce-e1ff-4b5c-b8a5-a40b4513db0c","keyName":"e2e-rate-b-708da3","subscription":"e2e-rate-iso-b-708da3","tenant":"e2e-shared-b-da56f9","userId":"e78cddce-e1ff-4b5c-b8a5-a40b4513db0c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-da56f9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-da56f9/rate-test-model-da56f9\",\"requestedSubscription\":\"e2e-rate-iso-b-708da3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-da56f9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-da56f9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-708da3","namespace":"ai-tenant-e2e-shared-b-da56f9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-da56f9/rate-test-model-da56f9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-708da3"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e78cddce-e1ff-4b5c-b8a5-a40b4513db0c","keyName":"e2e-rate-b-708da3","selected_subscription":"e2e-rate-iso-b-708da3","selected_subscription_key":"ai-tenant-e2e-shared-b-da56f9/e2e-rate-iso-b-708da3@ai-tenant-e2e-shared-b-da56f9/rate-test-model-da56f9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-da56f9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-708da3","namespace":"ai-tenant-e2e-shared-b-da56f9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T07:50:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a172ea6e-ed45-4804-8127-d87e3a127bff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T07:50:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acfe5afcb12d8baea221902c00f64740aba0c9f67335fd2266e28e8bd9d6c9d5"}
{"level":"info","ts":"2026-07-13T07:50:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e52d07764889b71626509fdbe50033d731fb5aac74d71c78097e27087a86fd21"}
{"level":"info","ts":"2026-07-13T07:50:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f761003b7de1d837e4be36fcdb508f16c40f966238d476984f47ed956624d9a"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01f89415cd48169b2c9f2a748d32ed2157a22f5beae1844ee67df67af9506bcd"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2719c60c8756ae394a9090ac7224426e90ed94e126b80cedd5d96d5da38f8058"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3571f1469fac10374a77a988ea521cc5e8b0a7f36c465c2bf58445161e65cea4"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7420b3b488d9cba9c43fe6054b7334362b419573f5efa151d8af983fc363d96"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/218b40f9fecd085e0d04914b8c23ecfa2fcfa88921cbfb05f7ce65e6e80e4519"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4324c738fcacf67cb924d83de2c30d6821513243076e3d033e5495cccf0fd85"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d274e6ab0d799e9a428722ea3e360b3237d42565c2aa47e51527c9603ff0aeb"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cd944f0ace1ac075fdc7050ee2d458c0677b88ff69033f768cf5db397cea364"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a1d84d8fb5e489c681906098ef1a93a51b4c0ac4167aedd1ba084879ed3e928"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e80fd4e8b6006438f83b7b4a1dca05e209da6e292d23c3edcbd8d5c411585409"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b324fdd0755637d447a3e5d88297c102bb6cca15cfd106b6da8676a9eca6c8e4"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6457d536a55f4b66caffe1f9dad8a34ba6cc091e88017c73a873562f176a5be3"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6704fd2726669fb9382494ad01439e58802a2e5b3f7dd80f0c2036e13f28e5c6"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0c1b7bfde9ad3f995e6230c4f5e9309132773d49e0b4ab341c2871e10c5c393"}
{"level":"info","ts":"2026-07-13T07:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0106ec8bd33271f0631bb4e14ce8d7aa34536a7ad8750d46a6c3753e8f87e1e6"}
{"level":"info","ts":"2026-07-13T07:51:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9334047764ba3eca7e7a64a3aaf8cc728de78082b992c1849e61ac8a03fd11e4"}
{"level":"info","ts":"2026-07-13T07:51:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bacf61c4c614c29d9059d9529b927cbaebe7ca1cd6f898d744ebcf27d946b45"}