--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682"}
{"level":"info","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682"}
{"level":"debug","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:23:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:23:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:23:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:23:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682"}
{"level":"debug","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682"}
{"level":"debug","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:23:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:23:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:23:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682"}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0"}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0"}
{"level":"error","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0"}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0"}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95"}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95"}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95"}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95"}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95"}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8"}
{"level":"error","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8"}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3c817a5c909ffbb5b20c03cee613f9864def4a3b776763f1084b1eaf5e03f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3c817a5c909ffbb5b20c03cee613f9864def4a3b776763f1084b1eaf5e03f3"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f3c817a5c909ffbb5b20c03cee613f9864def4a3b776763f1084b1eaf5e03f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f3c817a5c909ffbb5b20c03cee613f9864def4a3b776763f1084b1eaf5e03f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f3c817a5c909ffbb5b20c03cee613f9864def4a3b776763f1084b1eaf5e03f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f3c817a5c909ffbb5b20c03cee613f9864def4a3b776763f1084b1eaf5e03f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3c817a5c909ffbb5b20c03cee613f9864def4a3b776763f1084b1eaf5e03f3"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f3c817a5c909ffbb5b20c03cee613f9864def4a3b776763f1084b1eaf5e03f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f3c817a5c909ffbb5b20c03cee613f9864def4a3b776763f1084b1eaf5e03f3"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed"}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72"}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed"}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350"}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0"}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350"}
{"level":"debug","ts":"2026-07-06T20:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:24:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350"}
{"level":"info","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41676","PortSpecifier":{"PortValue":41676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-efdc2b.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41676","PortSpecifier":{"PortValue":41676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369478,"nanos":597139759},"http":{"id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","method":"POST","headers":{":authority":"e2e-inf-a-efdc2b.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ddb2a78d133d08cb42432d32147ea88ea051dfac965cc8dd664471764a40a80d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-efdc2b.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-efdc2b/test-model-efdc2b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:24:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c49dbe43-8cb2-4dfd-b293-a7643b2502c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41682","PortSpecifier":{"PortValue":41682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","method":"POST","path":"/ai-tenant-e2e-inf-a-efdc2b/test-model-efdc2b/v1/chat/completions","host":"e2e-inf-a-efdc2b.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41682","PortSpecifier":{"PortValue":41682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369482,"nanos":657568798},"http":{"id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","method":"POST","headers":{":authority":"e2e-inf-a-efdc2b.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-efdc2b/test-model-efdc2b/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wUyRZEop9eOJ7pMj_7kmM0s2nde8KQrS1xqddexlCPEqIFpqEaMQb3wwZtpz"}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-efdc2b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wUyRZEop9eOJ7pMj_7kmM0s2nde8KQrS1xqddexlCPEqIFpqEaMQb3wwZtpz\"}"}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-efdc2b.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e985d0d7-81ad-43f3-9c95-495f1f345bf2","keyName":"e2e-tenant-inference-efdc2b","subscription":"test-model-efdc2b-sub","tenant":"e2e-inf-a-efdc2b","userId":"e985d0d7-81ad-43f3-9c95-495f1f345bf2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-efdc2b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-efdc2b/test-model-efdc2b\",\"requestedSubscription\":\"test-model-efdc2b-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-efdc2b.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-efdc2b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-efdc2b-sub","namespace":"ai-tenant-e2e-inf-a-efdc2b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-efdc2b/test-model-efdc2b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-efdc2b-sub"}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e985d0d7-81ad-43f3-9c95-495f1f345bf2","keyName":"e2e-tenant-inference-efdc2b","selected_subscription":"test-model-efdc2b-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-efdc2b/test-model-efdc2b-sub@ai-tenant-e2e-inf-a-efdc2b/test-model-efdc2b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-efdc2b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-efdc2b-sub","namespace":"ai-tenant-e2e-inf-a-efdc2b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af66c571-b37b-4fc7-8598-a24b8c7504c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41688","PortSpecifier":{"PortValue":41688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-efdc2b.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41688","PortSpecifier":{"PortValue":41688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369482,"nanos":961242941},"http":{"id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","method":"POST","headers":{":authority":"e2e-inf-a-efdc2b.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ddb2a78d133d08cb42432d32147ea88ea051dfac965cc8dd664471764a40a80d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-efdc2b.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-efdc2b/test-model-efdc2b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:24:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c68b4ee1-e673-4923-95a9-6db6b41cb780","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:24:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9843da4-11a9-4825-961d-5163477d3695","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38706","PortSpecifier":{"PortValue":38706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9843da4-11a9-4825-961d-5163477d3695","method":"POST","path":"/ai-tenant-e2e-inf-b-f034b4/test-model-f034b4/v1/chat/completions","host":"e2e-inf-b-f034b4.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:24:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9843da4-11a9-4825-961d-5163477d3695","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38706","PortSpecifier":{"PortValue":38706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369483,"nanos":4013592},"http":{"id":"c9843da4-11a9-4825-961d-5163477d3695","method":"POST","headers":{":authority":"e2e-inf-b-f034b4.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-f034b4/test-model-f034b4/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:24:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9843da4-11a9-4825-961d-5163477d3695","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tsSefvQtvIc4Jcx4_pBFl2jrZlgHjJWvunISxwG53eVWgjgmQWh1fvEg9n0J"}
{"level":"debug","ts":"2026-07-06T20:24:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9843da4-11a9-4825-961d-5163477d3695","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-f034b4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tsSefvQtvIc4Jcx4_pBFl2jrZlgHjJWvunISxwG53eVWgjgmQWh1fvEg9n0J\"}"}
{"level":"debug","ts":"2026-07-06T20:24:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9843da4-11a9-4825-961d-5163477d3695","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-f034b4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T20:24:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"c9843da4-11a9-4825-961d-5163477d3695","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-f034b4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-06T20:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9843da4-11a9-4825-961d-5163477d3695","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-f034b4.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-f034b4/test-model-f034b4/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:24:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c9843da4-11a9-4825-961d-5163477d3695","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T20:24:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9843da4-11a9-4825-961d-5163477d3695","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T20:24:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9843da4-11a9-4825-961d-5163477d3695","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T20:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f3c817a5c909ffbb5b20c03cee613f9864def4a3b776763f1084b1eaf5e03f3"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93aa240c889e6d9558ae8e02adea5a4b89e01549f5d708dcf24cadded2261845"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/122aabfee9f22d2c6e437327c7b78d4c9e2ebb5ffbfe0dd6b47f69c6f25c3c0e"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2281e979b02cd20df6676d5ca8de341d48e5b8a28f84144e4d4ba470a77aa8df"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac43820b8c89d04728795ba2191fb18563756850544c32c319f47cfa221cb88a"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/127f3a4713f862100d36dff78e57eccac61f7cec2e0fb4308d9cb887ac6b5d95"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/890a1e2a39f1c28d9136b9d7ad7dae5f9c97fb05a4294ab98feb25a2f2666ee8"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdfbcfafe07fe95e6f620c98d4a7795b8fabbfaedaa4628da8f97e28931739b0"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36fa4a55f5496a584d7ffef7eade6003c079887f252a256c0b80efa0dbbc8013"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08b85d61ec7a792a3d4c4037309be5384a868331a5468783efb1a67b1b25f3e3"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c6242c2104a58fdc4726ce7fe6128c2d6ef70f30c9285e8f6c3fcd68f73fbc0"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/799431072c13b39d9fdbe1491b3163def5e9e35486f84197bcb5c9f9b777d682"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5b332ccdd2467dd433412ed9468b8f688e46c4eff90bfcc827ae82b80347350"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a764976dc06ba3da8c8b7ee06efe057c85a9bd0265a54c5f28a655fe203ffae"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51702fdf3ff6f7d8004b6b6e17f0857c2a35918e4fbee9c1cd0e2711c6140911"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6d31dde36aa24a7d51d131d30b5b2ccb237ef108f358474fa36a2184e0c431b"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddb2a78d133d08cb42432d32147ea88ea051dfac965cc8dd664471764a40a80d"}
{"level":"info","ts":"2026-07-06T20:24:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e03d50a62c22f6cbe094ae9588c97f4ea986e1fe2f785d89835b64d042c6df63"}
{"level":"info","ts":"2026-07-06T20:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5617b0d2e25f0b57b17431f5e381a0a0a6cd29cc14aca3e22d9684286451c9ed"}
{"level":"info","ts":"2026-07-06T20:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a862646cdf6afe89a33989c6de8e28ba1f3b73f4dab5c413287426b97633ff72"}
{"level":"debug","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186"}
{"level":"info","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186"}
{"level":"info","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186"}
{"level":"info","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186"}
{"level":"debug","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186"}
{"level":"debug","ts":"2026-07-06T20:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7"}
{"level":"info","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7"}
{"level":"info","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7"}
{"level":"debug","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:25:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:25:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7"}
{"level":"debug","ts":"2026-07-06T20:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:26:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:26:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"}
{"level":"info","ts":"2026-07-06T20:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905"}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905"}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905"}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905"}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:26:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:26:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905"}
{"level":"info","ts":"2026-07-06T20:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1915fa1d1d7bcd4bf5339185b50ecd51ac0c430d71968640412b8f0597715186"}
{"level":"info","ts":"2026-07-06T20:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f82cced04f78819cedaa74d7f272354d19529815d86a0236ff260f31560570f7"}
{"level":"info","ts":"2026-07-06T20:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb388875028a6f3bcddcea15d339207adfb900a7dc61a91577bdcff1814cbb03"}
{"level":"info","ts":"2026-07-06T20:26:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cf7fe058cc8d77adbde67a0f74f37936d99bc3ed60cdaa2601b0196f2e2a905"}
{"level":"debug","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"}
{"level":"info","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"}
{"level":"debug","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"}
{"level":"debug","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"}
{"level":"debug","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"error","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"211e3f9d3f0d8bfd9b0516fb43423d47cbbdc568fd753a91a5a5c684d1080ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/211e3f9d3f0d8bfd9b0516fb43423d47cbbdc568fd753a91a5a5c684d1080ff2"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"211e3f9d3f0d8bfd9b0516fb43423d47cbbdc568fd753a91a5a5c684d1080ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"211e3f9d3f0d8bfd9b0516fb43423d47cbbdc568fd753a91a5a5c684d1080ff2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["211e3f9d3f0d8bfd9b0516fb43423d47cbbdc568fd753a91a5a5c684d1080ff2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/211e3f9d3f0d8bfd9b0516fb43423d47cbbdc568fd753a91a5a5c684d1080ff2"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"211e3f9d3f0d8bfd9b0516fb43423d47cbbdc568fd753a91a5a5c684d1080ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/211e3f9d3f0d8bfd9b0516fb43423d47cbbdc568fd753a91a5a5c684d1080ff2"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"211e3f9d3f0d8bfd9b0516fb43423d47cbbdc568fd753a91a5a5c684d1080ff2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c5be6f3ac47b40f7b3d4ec035246905bd05bb452be7321c8fb7bcff6cc7d48f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c5be6f3ac47b40f7b3d4ec035246905bd05bb452be7321c8fb7bcff6cc7d48f"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c5be6f3ac47b40f7b3d4ec035246905bd05bb452be7321c8fb7bcff6cc7d48f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c5be6f3ac47b40f7b3d4ec035246905bd05bb452be7321c8fb7bcff6cc7d48f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c5be6f3ac47b40f7b3d4ec035246905bd05bb452be7321c8fb7bcff6cc7d48f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c5be6f3ac47b40f7b3d4ec035246905bd05bb452be7321c8fb7bcff6cc7d48f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c5be6f3ac47b40f7b3d4ec035246905bd05bb452be7321c8fb7bcff6cc7d48f"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c5be6f3ac47b40f7b3d4ec035246905bd05bb452be7321c8fb7bcff6cc7d48f"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c5be6f3ac47b40f7b3d4ec035246905bd05bb452be7321c8fb7bcff6cc7d48f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51"}
{"level":"info","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51"}
{"level":"debug","ts":"2026-07-06T20:27:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a468551f92a5ed7e62621cef689c7fdd53f52c489db4e2a3460b0f404c02795f"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a468551f92a5ed7e62621cef689c7fdd53f52c489db4e2a3460b0f404c02795f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a468551f92a5ed7e62621cef689c7fdd53f52c489db4e2a3460b0f404c02795f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a468551f92a5ed7e62621cef689c7fdd53f52c489db4e2a3460b0f404c02795f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a468551f92a5ed7e62621cef689c7fdd53f52c489db4e2a3460b0f404c02795f"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a468551f92a5ed7e62621cef689c7fdd53f52c489db4e2a3460b0f404c02795f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cabc208c354f546fc3e6638137d34800eb50c84b6757d136cc34fcbfcb239bc"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cabc208c354f546fc3e6638137d34800eb50c84b6757d136cc34fcbfcb239bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cabc208c354f546fc3e6638137d34800eb50c84b6757d136cc34fcbfcb239bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cabc208c354f546fc3e6638137d34800eb50c84b6757d136cc34fcbfcb239bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303bf35ca55773498e9e59e0d83d8f57aaf0a7adf4edc29f72238c646522ea15"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"303bf35ca55773498e9e59e0d83d8f57aaf0a7adf4edc29f72238c646522ea15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["303bf35ca55773498e9e59e0d83d8f57aaf0a7adf4edc29f72238c646522ea15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cabc208c354f546fc3e6638137d34800eb50c84b6757d136cc34fcbfcb239bc"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"303bf35ca55773498e9e59e0d83d8f57aaf0a7adf4edc29f72238c646522ea15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cabc208c354f546fc3e6638137d34800eb50c84b6757d136cc34fcbfcb239bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303bf35ca55773498e9e59e0d83d8f57aaf0a7adf4edc29f72238c646522ea15"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"303bf35ca55773498e9e59e0d83d8f57aaf0a7adf4edc29f72238c646522ea15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1097c34cb55c9819972801fbaf163b95c14c4313e25415d32eeb9b0ace9585f"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1097c34cb55c9819972801fbaf163b95c14c4313e25415d32eeb9b0ace9585f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1097c34cb55c9819972801fbaf163b95c14c4313e25415d32eeb9b0ace9585f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1097c34cb55c9819972801fbaf163b95c14c4313e25415d32eeb9b0ace9585f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1097c34cb55c9819972801fbaf163b95c14c4313e25415d32eeb9b0ace9585f"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1097c34cb55c9819972801fbaf163b95c14c4313e25415d32eeb9b0ace9585f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665"}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:27:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"}
{"level":"info","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39242","PortSpecifier":{"PortValue":39242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39242","PortSpecifier":{"PortValue":39242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369676,"nanos":811563253},"http":{"id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4df5ccce-ac93-4935-82cc-d351d7fd247f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37432","PortSpecifier":{"PortValue":37432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37432","PortSpecifier":{"PortValue":37432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369676,"nanos":884130520},"http":{"id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/auth-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb24e432-4c2b-466e-8dfc-afb8520f8b0b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39250","PortSpecifier":{"PortValue":39250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e411a0c-47fa-412c-9926-d31933756b5c","method":"GET","path":"/maas-api/v1/api-keys/3cbc42b2-4d79-4930-86e0-81823866b5cb","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39250","PortSpecifier":{"PortValue":39250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369676,"nanos":973904442},"http":{"id":"8e411a0c-47fa-412c-9926-d31933756b5c","method":"GET","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3cbc42b2-4d79-4930-86e0-81823866b5cb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3cbc42b2-4d79-4930-86e0-81823866b5cb",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:27:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e411a0c-47fa-412c-9926-d31933756b5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37440","PortSpecifier":{"PortValue":37440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","method":"GET","path":"/maas-api/v1/api-keys/f35d54f8-14f9-41c2-a28e-8909b805e6d8","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37440","PortSpecifier":{"PortValue":37440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369677,"nanos":23405152},"http":{"id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","method":"GET","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f35d54f8-14f9-41c2-a28e-8909b805e6d8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f35d54f8-14f9-41c2-a28e-8909b805e6d8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/auth-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:27:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c14ac79-16a7-4b39-9f41-9b2f0f3da4d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35866","PortSpecifier":{"PortValue":35866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35866","PortSpecifier":{"PortValue":35866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369694,"nanos":616752005},"http":{"id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb70f5cd-4178-4d39-b96e-5beba39ba9a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37974","PortSpecifier":{"PortValue":37974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37974","PortSpecifier":{"PortValue":37974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369694,"nanos":654901047},"http":{"id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/auth-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01b27cd8-5bd0-40e9-a58f-40ae02a2d422","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35874","PortSpecifier":{"PortValue":35874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dabc36de-0ac5-421b-9237-56de250feb5d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35874","PortSpecifier":{"PortValue":35874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369694,"nanos":701850136},"http":{"id":"dabc36de-0ac5-421b-9237-56de250feb5d","method":"GET","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XyS3NqzcI70bSgWJ_epjQpl7kZKUfXn8g7QLOxXQQixQlHK8JKtlV1dM24BO"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XyS3NqzcI70bSgWJ_epjQpl7kZKUfXn8g7QLOxXQQixQlHK8JKtlV1dM24BO\"}"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"caa03bcf-e6e0-4518-abdd-a70fd5def963","keyName":"e2e-auth-iso-a-1db9ce","subscription":"e2e-auth-iso-5ddf82","tenant":"e2e-shared-a-629470","userId":"caa03bcf-e6e0-4518-abdd-a70fd5def963","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5ddf82"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:28:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dabc36de-0ac5-421b-9237-56de250feb5d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43074","PortSpecifier":{"PortValue":43074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43074","PortSpecifier":{"PortValue":43074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369716,"nanos":207732734},"http":{"id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88e48d5c-7863-4540-a9e2-b09076a2a9ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45604","PortSpecifier":{"PortValue":45604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45604","PortSpecifier":{"PortValue":45604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369716,"nanos":250386647},"http":{"id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/auth-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"869b8fcf-64c4-4c50-8e0f-062a419dc004","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45614","PortSpecifier":{"PortValue":45614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45614","PortSpecifier":{"PortValue":45614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369716,"nanos":290420302},"http":{"id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","method":"GET","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GqAj7MQHqizxOERE_fOY31UDFUlpSO5gm4osrWzm3sFuB3lXAsDjACkOzOGS"}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a90d79.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GqAj7MQHqizxOERE_fOY31UDFUlpSO5gm4osrWzm3sFuB3lXAsDjACkOzOGS\"}"}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a90d79.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T20:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d435c827-2efe-44d3-ad7c-46e84cb54aaf","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58346","PortSpecifier":{"PortValue":58346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f79a32e1-ba76-477d-9178-8766dc601d76","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58346","PortSpecifier":{"PortValue":58346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369739,"nanos":38275700},"http":{"id":"f79a32e1-ba76-477d-9178-8766dc601d76","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f79a32e1-ba76-477d-9178-8766dc601d76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35432","PortSpecifier":{"PortValue":35432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35432","PortSpecifier":{"PortValue":35432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369739,"nanos":78634470},"http":{"id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/auth-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7e3a2c8-8782-4333-a71b-dc3f7940d167","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58356","PortSpecifier":{"PortValue":58356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58356","PortSpecifier":{"PortValue":58356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369739,"nanos":124105290},"http":{"id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"734eda2d-b36e-4e39-940b-dd97b8067fe4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35446","PortSpecifier":{"PortValue":35446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36cbc342-30a5-41af-89c6-564b1a1255d1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35446","PortSpecifier":{"PortValue":35446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369739,"nanos":164483601},"http":{"id":"36cbc342-30a5-41af-89c6-564b1a1255d1","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/auth-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:28:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36cbc342-30a5-41af-89c6-564b1a1255d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:29:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57164","PortSpecifier":{"PortValue":57164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:29:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57164","PortSpecifier":{"PortValue":57164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369762,"nanos":996592608},"http":{"id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f0c93fd-04e5-40f8-96c8-35634a7224b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57426","PortSpecifier":{"PortValue":57426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57426","PortSpecifier":{"PortValue":57426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369763,"nanos":32637392},"http":{"id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/auth-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d921bfb3-f1e6-47c4-a5e5-6f11e20ebf63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57442","PortSpecifier":{"PortValue":57442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7912a36b-ec65-47fb-9126-87d48ada3a33","method":"GET","path":"/maas-api/v1/api-keys/7cc6d936-2ef7-43ea-ba99-4bd3f962ecb4","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57442","PortSpecifier":{"PortValue":57442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369763,"nanos":73303327},"http":{"id":"7912a36b-ec65-47fb-9126-87d48ada3a33","method":"GET","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7cc6d936-2ef7-43ea-ba99-4bd3f962ecb4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7cc6d936-2ef7-43ea-ba99-4bd3f962ecb4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/auth-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7912a36b-ec65-47fb-9126-87d48ada3a33","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57176","PortSpecifier":{"PortValue":57176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","method":"GET","path":"/maas-api/v1/api-keys/7cc6d936-2ef7-43ea-ba99-4bd3f962ecb4","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57176","PortSpecifier":{"PortValue":57176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369763,"nanos":107389736},"http":{"id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","method":"GET","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7cc6d936-2ef7-43ea-ba99-4bd3f962ecb4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7cc6d936-2ef7-43ea-ba99-4bd3f962ecb4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:29:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49e59fee-aaa7-4fcc-93d0-a1035eadaa2d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53492","PortSpecifier":{"PortValue":53492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53492","PortSpecifier":{"PortValue":53492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369785,"nanos":602765573},"http":{"id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4af96467-c9d3-4e63-a9c3-38956109c0fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50732","PortSpecifier":{"PortValue":50732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50732","PortSpecifier":{"PortValue":50732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369785,"nanos":643386611},"http":{"id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/auth-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e1d6dea-a9b2-4c39-a466-268fac8089c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53502","PortSpecifier":{"PortValue":53502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53502","PortSpecifier":{"PortValue":53502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369785,"nanos":680258914},"http":{"id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uNICtWZDJlJXnl8P_ZtlN6EQ0XWBkMZgcz0SH4AbDCX0pIs2vL4l2W7BJW8b"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uNICtWZDJlJXnl8P_ZtlN6EQ0XWBkMZgcz0SH4AbDCX0pIs2vL4l2W7BJW8b\"}"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"26d26f4d-d5b5-4637-ab4f-db5d12803d52","keyName":"e2e-auth-iso-a-c9bf1f","subscription":"e2e-auth-iso-814aa9","tenant":"e2e-shared-a-629470","userId":"26d26f4d-d5b5-4637-ab4f-db5d12803d52","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/auth-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-814aa9"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:29:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f4e156c-9886-4a4c-90f2-e381aaeed43f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f41b81c574b537fc8ae552604d738a1fffdcf5337f34155214ce659e0780f928"}
{"level":"info","ts":"2026-07-06T20:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/245273c25917d4c7f95b0e3feb7e31d56fcca2a5ff15faa541efe3265d119d51"}
{"level":"info","ts":"2026-07-06T20:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c30e23527642cc9d81cee5caf3528ce90ba9e934938a2b3e0f22eb375a44e3cf"}
{"level":"info","ts":"2026-07-06T20:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/211e3f9d3f0d8bfd9b0516fb43423d47cbbdc568fd753a91a5a5c684d1080ff2"}
{"level":"info","ts":"2026-07-06T20:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c63fa794847a6f01e2b0fd57baf553b431ebe961ff1fee7e5840fa9b914e6277"}
{"level":"info","ts":"2026-07-06T20:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24c38ae7576846d67e3342caeb5c068f5d7847821ba47070f221939f62fc2fbe"}
{"level":"info","ts":"2026-07-06T20:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cbe8199a9155c3968cc2eb827b7b41fdf77e90e812e1aa992d3afb3c84b33a6"}
{"level":"info","ts":"2026-07-06T20:29:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c5be6f3ac47b40f7b3d4ec035246905bd05bb452be7321c8fb7bcff6cc7d48f"}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3"}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"}
{"level":"error","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54"}
{"level":"error","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6"}
{"level":"info","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a468551f92a5ed7e62621cef689c7fdd53f52c489db4e2a3460b0f404c02795f"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ea7c981bdbb4f01f82964400242fb5af3155dabadc604cf9a9664fac7d66665"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15ac139185957413a7f5de74eb980955fa150836ed5cf12cbada4bf79243c3e7"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/350d975811931144af6fad9ef0bab92aca9213633d0e39bb2bc4519ad1233f56"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/303bf35ca55773498e9e59e0d83d8f57aaf0a7adf4edc29f72238c646522ea15"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6"}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8243a10847171b6236aeaef2435561ad3a31daebcbe0d6b3ab9799d96857ca0"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cabc208c354f546fc3e6638137d34800eb50c84b6757d136cc34fcbfcb239bc"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1097c34cb55c9819972801fbaf163b95c14c4313e25415d32eeb9b0ace9585f"}
{"level":"info","ts":"2026-07-06T20:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"error","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149db78ab3d912a3dc5e615e3b94d139afaa9d1316e04665b1577206b476456d"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149db78ab3d912a3dc5e615e3b94d139afaa9d1316e04665b1577206b476456d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149db78ab3d912a3dc5e615e3b94d139afaa9d1316e04665b1577206b476456d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98"}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149db78ab3d912a3dc5e615e3b94d139afaa9d1316e04665b1577206b476456d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc"}
{"level":"info","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149db78ab3d912a3dc5e615e3b94d139afaa9d1316e04665b1577206b476456d"}
{"level":"info","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149db78ab3d912a3dc5e615e3b94d139afaa9d1316e04665b1577206b476456d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc"}
{"level":"debug","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc"}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3"}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5"}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98"}
{"level":"debug","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2"}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1"}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2"}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350"}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149db78ab3d912a3dc5e615e3b94d139afaa9d1316e04665b1577206b476456d"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149db78ab3d912a3dc5e615e3b94d139afaa9d1316e04665b1577206b476456d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:30:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:30:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38052","PortSpecifier":{"PortValue":38052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38052","PortSpecifier":{"PortValue":38052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369839,"nanos":392990236},"http":{"id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/sub-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d81ff4e-d50a-4ac9-a70c-00195ebe6426","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51900","PortSpecifier":{"PortValue":51900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e09e41ad-804c-4c4e-92c9-839580de7120","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51900","PortSpecifier":{"PortValue":51900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369839,"nanos":443792247},"http":{"id":"e09e41ad-804c-4c4e-92c9-839580de7120","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/sub-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e09e41ad-804c-4c4e-92c9-839580de7120","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38066","PortSpecifier":{"PortValue":38066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38066","PortSpecifier":{"PortValue":38066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369839,"nanos":478588722},"http":{"id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","method":"GET","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11ZO5ZA5sljiKxuG4_PteY9UO2BQcQNqghaLSRymySyebsNzvVZQCD7Lcusgd"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11ZO5ZA5sljiKxuG4_PteY9UO2BQcQNqghaLSRymySyebsNzvVZQCD7Lcusgd\"}"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73672bbe-918b-4a7a-a555-c742f3661e09","keyName":"e2e-sub-iso-a4d077","subscription":"e2e-a-only-fc4da4","tenant":"e2e-shared-a-629470","userId":"73672bbe-918b-4a7a-a555-c742f3661e09","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/sub-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-fc4da4"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a5d4348-2d93-4541-a7d0-943c9e9b8cc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51914","PortSpecifier":{"PortValue":51914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c288cced-969e-4960-9c8a-ea289bd4aee0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51914","PortSpecifier":{"PortValue":51914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369839,"nanos":510950272},"http":{"id":"c288cced-969e-4960-9c8a-ea289bd4aee0","method":"GET","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IeG7EVnZjMOtPK7o_XPiowJqQHtQ2b4QOIg1DXg54dOaUWZtuqQOQyPXVF7r"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a90d79.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IeG7EVnZjMOtPK7o_XPiowJqQHtQ2b4QOIg1DXg54dOaUWZtuqQOQyPXVF7r\"}"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a90d79.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f8c1d02-d686-4846-9a3d-1eff83b6344c","keyName":"e2e-sub-iso-67d2f4","subscription":"e2e-b-only-fc4da4","tenant":"e2e-shared-b-a90d79","userId":"5f8c1d02-d686-4846-9a3d-1eff83b6344c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/sub-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-fc4da4"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c288cced-969e-4960-9c8a-ea289bd4aee0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49040","PortSpecifier":{"PortValue":49040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49040","PortSpecifier":{"PortValue":49040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369856,"nanos":606427674},"http":{"id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/sub-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4ec6d7e-b9ae-40b5-83f4-56ec7b1ef2dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56800","PortSpecifier":{"PortValue":56800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56800","PortSpecifier":{"PortValue":56800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369856,"nanos":647199457},"http":{"id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/sub-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ca6b4c2-30c3-4526-a4da-7ac5019adce2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49046","PortSpecifier":{"PortValue":49046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49046","PortSpecifier":{"PortValue":49046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369856,"nanos":683525957},"http":{"id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-F2UEZj9fx66KfmDa_1Q8cCh77PslJcB3vtVCJ1JqguaTCwfkiK3TbU5jJ42N"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-F2UEZj9fx66KfmDa_1Q8cCh77PslJcB3vtVCJ1JqguaTCwfkiK3TbU5jJ42N\"}"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eda51fff-c647-4726-980a-963783e8416c","keyName":"e2e-sub-iso-47c6db","subscription":"e2e-shared-sub-f01939","tenant":"e2e-shared-a-629470","userId":"eda51fff-c647-4726-980a-963783e8416c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/sub-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f01939"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5d96a4b-ee48-4402-ac70-36d3b9932aaf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56810","PortSpecifier":{"PortValue":56810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56810","PortSpecifier":{"PortValue":56810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369856,"nanos":712514407},"http":{"id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BvjL7PIwTeFpKMeF_sSkO70cTWAkBVmZZoVBw6yic9fpqDhclEKkR6YEjjuz"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a90d79.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BvjL7PIwTeFpKMeF_sSkO70cTWAkBVmZZoVBw6yic9fpqDhclEKkR6YEjjuz\"}"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a90d79.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8e7df5aa-11fe-4a9c-a9f7-9e792bb0e3d6","keyName":"e2e-sub-iso-1f8722","subscription":"e2e-shared-sub-f01939","tenant":"e2e-shared-b-a90d79","userId":"8e7df5aa-11fe-4a9c-a9f7-9e792bb0e3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/sub-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f01939"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:30:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b6827da-34a7-41ec-b5a5-c399708f2c12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e654c9f06447c9d8c83798735e23c2821ad34c1534f543200d1e4632bf923c6"}
{"level":"info","ts":"2026-07-06T20:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f7083651fc58ed6c2a683cc1a24484025abf62b166cb5eeff47318c6d401020"}
{"level":"info","ts":"2026-07-06T20:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6e57b27c070feaaabbe442662f8041bb19f8957cd824dc1f49a950490a6eeb2"}
{"level":"info","ts":"2026-07-06T20:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d220d328a1fe96e09382033449a8f66d0b1000e80e4b1d6678982b0a089811a3"}
{"level":"info","ts":"2026-07-06T20:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d60f767c5ac05da60fc308cfc5236b7fc0e6557147b5ca156fc61857af49b0c2"}
{"level":"info","ts":"2026-07-06T20:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac706d52c2ec180f4309809413fabb55f837c59fc74d013cdbde80faa2f039c9"}
{"level":"info","ts":"2026-07-06T20:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d49b011d0dd7b169c13ac686fbe03c1bea7dc8ffd1321566d2cb3e9aaa585c54"}
{"level":"info","ts":"2026-07-06T20:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fdf0ac11c0920d7c0154a3385eaceae91063869d01f57a079b05e063386c6a23"}
{"level":"info","ts":"2026-07-06T20:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbd5233f4b9a4ae9554dce0cf13470144e7966343b6343088f711b5654950ebc"}
{"level":"info","ts":"2026-07-06T20:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f37bd5a65ecdd5670045ca9ff9ea61b01c3655df8d68d475ba281c9cab72cd98"}
{"level":"info","ts":"2026-07-06T20:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/950a49a80897160714626a8748ea9ad5da9652cbaea5226803f28642b063d350"}
{"level":"info","ts":"2026-07-06T20:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49a7a8749f6cce0a728c891a103026cb6d06b24472e148c4d565e85f26c4fef1"}
{"level":"info","ts":"2026-07-06T20:31:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2504984172b64c1449e2436e40cdd8c942c33efef38f8e6700059a4f509260b5"}
{"level":"info","ts":"2026-07-06T20:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/149db78ab3d912a3dc5e615e3b94d139afaa9d1316e04665b1577206b476456d"}
{"level":"info","ts":"2026-07-06T20:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82b0ebdaa912a7a3964a65cf196f36df80556e03ce5f5a181402dbc3d8a62291"}
{"level":"info","ts":"2026-07-06T20:31:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bdd5052ef43a779ee33d63be575ff3a6da6b02312244e10d66c74b729ab66fa"}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c"}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c"}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c"}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa"}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34"}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"debug","ts":"2026-07-06T20:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"}
{"level":"error","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f"}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e"}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"}
{"level":"error","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809"}
{"level":"info","ts":"2026-07-06T20:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"}
{"level":"debug","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d"}
{"level":"debug","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d"}
{"level":"debug","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809"}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"debug","ts":"2026-07-06T20:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:32:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:32:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:32:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:32:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"}
{"level":"debug","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f"}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890"}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"}
{"level":"info","ts":"2026-07-06T20:32:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2"}
{"level":"info","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53148","PortSpecifier":{"PortValue":53148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c250925-e576-421d-9ebd-fd413fa60ac4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53148","PortSpecifier":{"PortValue":53148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369945,"nanos":875768398},"http":{"id":"0c250925-e576-421d-9ebd-fd413fa60ac4","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c250925-e576-421d-9ebd-fd413fa60ac4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"136f9272-a090-4906-910a-eca96fea5bde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58798","PortSpecifier":{"PortValue":58798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"136f9272-a090-4906-910a-eca96fea5bde","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"136f9272-a090-4906-910a-eca96fea5bde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58798","PortSpecifier":{"PortValue":58798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369945,"nanos":921525704},"http":{"id":"136f9272-a090-4906-910a-eca96fea5bde","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"136f9272-a090-4906-910a-eca96fea5bde","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"136f9272-a090-4906-910a-eca96fea5bde","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"136f9272-a090-4906-910a-eca96fea5bde","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"136f9272-a090-4906-910a-eca96fea5bde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"136f9272-a090-4906-910a-eca96fea5bde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"136f9272-a090-4906-910a-eca96fea5bde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/rate-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"136f9272-a090-4906-910a-eca96fea5bde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"136f9272-a090-4906-910a-eca96fea5bde","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"136f9272-a090-4906-910a-eca96fea5bde","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"136f9272-a090-4906-910a-eca96fea5bde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"136f9272-a090-4906-910a-eca96fea5bde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53162","PortSpecifier":{"PortValue":53162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fec082a-c233-45de-9616-ae8aa8d77f86","method":"POST","path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53162","PortSpecifier":{"PortValue":53162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369945,"nanos":965838409},"http":{"id":"5fec082a-c233-45de-9616-ae8aa8d77f86","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Fym17z4H9eRbAoE3_wXXw0ZGGsrOahJbToNlbDlbChsrj0goNzW9rpFe5Po1"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Fym17z4H9eRbAoE3_wXXw0ZGGsrOahJbToNlbDlbChsrj0goNzW9rpFe5Po1\"}"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b46babe-2c04-4b9a-bfe6-17d06915938b","keyName":"e2e-rate-a-8295c9","subscription":"e2e-rate-iso-a-8295c9","tenant":"e2e-shared-a-629470","userId":"5b46babe-2c04-4b9a-bfe6-17d06915938b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\",\"requestedSubscription\":\"e2e-rate-iso-a-8295c9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8295c9","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8295c9"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b46babe-2c04-4b9a-bfe6-17d06915938b","keyName":"e2e-rate-a-8295c9","selected_subscription":"e2e-rate-iso-a-8295c9","selected_subscription_key":"ai-tenant-e2e-shared-a-629470/e2e-rate-iso-a-8295c9@ai-tenant-e2e-shared-a-629470/rate-test-model-629470","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8295c9","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fec082a-c233-45de-9616-ae8aa8d77f86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53178","PortSpecifier":{"PortValue":53178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","method":"POST","path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53178","PortSpecifier":{"PortValue":53178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369947,"nanos":29897325},"http":{"id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Fym17z4H9eRbAoE3_wXXw0ZGGsrOahJbToNlbDlbChsrj0goNzW9rpFe5Po1"}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Fym17z4H9eRbAoE3_wXXw0ZGGsrOahJbToNlbDlbChsrj0goNzW9rpFe5Po1\"}"}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b46babe-2c04-4b9a-bfe6-17d06915938b","keyName":"e2e-rate-a-8295c9","subscription":"e2e-rate-iso-a-8295c9","tenant":"e2e-shared-a-629470","userId":"5b46babe-2c04-4b9a-bfe6-17d06915938b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\",\"requestedSubscription\":\"e2e-rate-iso-a-8295c9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8295c9","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8295c9"}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b46babe-2c04-4b9a-bfe6-17d06915938b","keyName":"e2e-rate-a-8295c9","selected_subscription":"e2e-rate-iso-a-8295c9","selected_subscription_key":"ai-tenant-e2e-shared-a-629470/e2e-rate-iso-a-8295c9@ai-tenant-e2e-shared-a-629470/rate-test-model-629470","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8295c9","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43db2cf3-58e1-49d6-bff2-49c3c5f2dd33","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37428","PortSpecifier":{"PortValue":37428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","method":"POST","path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37428","PortSpecifier":{"PortValue":37428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369948,"nanos":69051680},"http":{"id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Fym17z4H9eRbAoE3_wXXw0ZGGsrOahJbToNlbDlbChsrj0goNzW9rpFe5Po1"}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Fym17z4H9eRbAoE3_wXXw0ZGGsrOahJbToNlbDlbChsrj0goNzW9rpFe5Po1\"}"}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b46babe-2c04-4b9a-bfe6-17d06915938b","keyName":"e2e-rate-a-8295c9","subscription":"e2e-rate-iso-a-8295c9","tenant":"e2e-shared-a-629470","userId":"5b46babe-2c04-4b9a-bfe6-17d06915938b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\",\"requestedSubscription\":\"e2e-rate-iso-a-8295c9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8295c9","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8295c9"}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b46babe-2c04-4b9a-bfe6-17d06915938b","keyName":"e2e-rate-a-8295c9","selected_subscription":"e2e-rate-iso-a-8295c9","selected_subscription_key":"ai-tenant-e2e-shared-a-629470/e2e-rate-iso-a-8295c9@ai-tenant-e2e-shared-a-629470/rate-test-model-629470","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8295c9","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4f47d18-0b8d-4ac0-8360-fce771d62094","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37998","PortSpecifier":{"PortValue":37998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31d50678-c03a-4fa0-87ab-9902f29027e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37998","PortSpecifier":{"PortValue":37998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369958,"nanos":914173389},"http":{"id":"31d50678-c03a-4fa0-87ab-9902f29027e2","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31d50678-c03a-4fa0-87ab-9902f29027e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46120","PortSpecifier":{"PortValue":46120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0f38291-77d6-40e4-b14d-6313a19120c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46120","PortSpecifier":{"PortValue":46120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369958,"nanos":957284477},"http":{"id":"c0f38291-77d6-40e4-b14d-6313a19120c4","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"]}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e23c015e9bad"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=3e4891d5-47aa-4a51-b18a-27834a2782b1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"13dd44fc-173d-4a1a-bda7-8a217668f4ca","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/rate-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0f38291-77d6-40e4-b14d-6313a19120c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38008","PortSpecifier":{"PortValue":38008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","method":"POST","path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38008","PortSpecifier":{"PortValue":38008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369958,"nanos":997444400},"http":{"id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PFjQrxhnshE8cGgO_k7YExNSyFOI06TRVRi505cxbDmaenVKd9wLHjwnQfsA"}
{"level":"debug","ts":"2026-07-06T20:32:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PFjQrxhnshE8cGgO_k7YExNSyFOI06TRVRi505cxbDmaenVKd9wLHjwnQfsA\"}"}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ef52d3cc-7800-44af-8782-20bfb833bcd3","keyName":"e2e-rate-a-164317","subscription":"e2e-rate-iso-a-164317","tenant":"e2e-shared-a-629470","userId":"ef52d3cc-7800-44af-8782-20bfb833bcd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\",\"requestedSubscription\":\"e2e-rate-iso-a-164317\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-164317","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-164317"}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ef52d3cc-7800-44af-8782-20bfb833bcd3","keyName":"e2e-rate-a-164317","selected_subscription":"e2e-rate-iso-a-164317","selected_subscription_key":"ai-tenant-e2e-shared-a-629470/e2e-rate-iso-a-164317@ai-tenant-e2e-shared-a-629470/rate-test-model-629470","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-164317","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e8ac1ea-b591-9031-928c-b6b1bd8c90cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38012","PortSpecifier":{"PortValue":38012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbe3214f-180c-4280-865d-ee2e1fab470d","method":"POST","path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38012","PortSpecifier":{"PortValue":38012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369960,"nanos":33621419},"http":{"id":"dbe3214f-180c-4280-865d-ee2e1fab470d","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PFjQrxhnshE8cGgO_k7YExNSyFOI06TRVRi505cxbDmaenVKd9wLHjwnQfsA"}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PFjQrxhnshE8cGgO_k7YExNSyFOI06TRVRi505cxbDmaenVKd9wLHjwnQfsA\"}"}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ef52d3cc-7800-44af-8782-20bfb833bcd3","keyName":"e2e-rate-a-164317","subscription":"e2e-rate-iso-a-164317","tenant":"e2e-shared-a-629470","userId":"ef52d3cc-7800-44af-8782-20bfb833bcd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\",\"requestedSubscription\":\"e2e-rate-iso-a-164317\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-164317","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-164317"}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ef52d3cc-7800-44af-8782-20bfb833bcd3","keyName":"e2e-rate-a-164317","selected_subscription":"e2e-rate-iso-a-164317","selected_subscription_key":"ai-tenant-e2e-shared-a-629470/e2e-rate-iso-a-164317@ai-tenant-e2e-shared-a-629470/rate-test-model-629470","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-164317","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbe3214f-180c-4280-865d-ee2e1fab470d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38014","PortSpecifier":{"PortValue":38014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","method":"POST","path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions","host":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38014","PortSpecifier":{"PortValue":38014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369961,"nanos":69030058},"http":{"id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","method":"POST","headers":{":authority":"e2e-shared-a-629470.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-629470/rate-test-model-629470/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PFjQrxhnshE8cGgO_k7YExNSyFOI06TRVRi505cxbDmaenVKd9wLHjwnQfsA"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PFjQrxhnshE8cGgO_k7YExNSyFOI06TRVRi505cxbDmaenVKd9wLHjwnQfsA\"}"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ef52d3cc-7800-44af-8782-20bfb833bcd3","keyName":"e2e-rate-a-164317","subscription":"e2e-rate-iso-a-164317","tenant":"e2e-shared-a-629470","userId":"ef52d3cc-7800-44af-8782-20bfb833bcd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\",\"requestedSubscription\":\"e2e-rate-iso-a-164317\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-629470.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-164317","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-629470/rate-test-model-629470\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-164317"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ef52d3cc-7800-44af-8782-20bfb833bcd3","keyName":"e2e-rate-a-164317","selected_subscription":"e2e-rate-iso-a-164317","selected_subscription_key":"ai-tenant-e2e-shared-a-629470/e2e-rate-iso-a-164317@ai-tenant-e2e-shared-a-629470/rate-test-model-629470","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-629470","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-164317","namespace":"ai-tenant-e2e-shared-a-629470","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f14e25ce-ea1a-4f08-b043-0d0b81ed765e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46122","PortSpecifier":{"PortValue":46122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","method":"POST","path":"/ai-tenant-e2e-shared-b-a90d79/rate-test-model-a90d79/v1/completions","host":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46122","PortSpecifier":{"PortValue":46122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783369961,"nanos":105511752},"http":{"id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","method":"POST","headers":{":authority":"e2e-shared-b-a90d79.apps.6c778935-3e50-45e8-a55d-e23c015e9bad.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a90d79/rate-test-model-a90d79/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wVkd3syJgOWpyQ3s_7WwVeIi4OnT1kVxmZXOBv8ZTQ7nT3aeGQqJjAGSdf6Y"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a90d79.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wVkd3syJgOWpyQ3s_7WwVeIi4OnT1kVxmZXOBv8ZTQ7nT3aeGQqJjAGSdf6Y\"}"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a90d79.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fd18a36b-92fd-42ab-b7dd-c523d0343144","keyName":"e2e-rate-b-164317","subscription":"e2e-rate-iso-b-164317","tenant":"e2e-shared-b-a90d79","userId":"fd18a36b-92fd-42ab-b7dd-c523d0343144","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a90d79.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a90d79/rate-test-model-a90d79\",\"requestedSubscription\":\"e2e-rate-iso-b-164317\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a90d79.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a90d79","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-164317","namespace":"ai-tenant-e2e-shared-b-a90d79","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a90d79/rate-test-model-a90d79\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-164317"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fd18a36b-92fd-42ab-b7dd-c523d0343144","keyName":"e2e-rate-b-164317","selected_subscription":"e2e-rate-iso-b-164317","selected_subscription_key":"ai-tenant-e2e-shared-b-a90d79/e2e-rate-iso-b-164317@ai-tenant-e2e-shared-b-a90d79/rate-test-model-a90d79","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a90d79","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-164317","namespace":"ai-tenant-e2e-shared-b-a90d79","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:32:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91bf8842-9c09-4af0-b29b-fae8a7edbba0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1f6a05b8ec46ccf560fe1bb940b1e891a830b94f2d5e7755b612aabf4531a34"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe3ef544b2c02d21f59e4d575a39549b5f08f8669626821e37b22865cd2d902d"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f39865659b782b5634c1617e7cdd1461abd7943aca09c97de1b13bcb66ae352"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/effd47bbe186499835826cd037373bbc98efd91d4230a8556f8b396627f2dc43"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/881fba8e1d649fb27bb20e068d5bafbff46864f0fa58f8db95050992fea2a16f"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f47017c4e762294328527012a7feca915a74583bd9231f947a88a6fb01e9544d"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fcd65075d864b301327f300c8f3f17c7bdec7a1622eedf598e1394f4294f6fb"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d10f6aaf04bee93072cb3b8e041e4e76c7780f1f84b273075eb7b3a5f5072e1"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/107359efe66fc7073f1adb2e0d4e1091f37113e449e630b3a4961a78582036b7"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a364fedfe6cf2273d42ab972d3353c6abdcb536d4c5f6bb401ba617950bfb84e"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddfadd51826f8db80ef74b8b330169f03f0ed70102d44fac470d6ccb9de12809"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3ea41c9ab82c6fc39fb796f9964b909909fb1d92d2b7ff15bba7f930fcb9a1e"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bec2920231a81dead6a098553faeba2647055ad6889841cc996d6ec1dd36be2"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afd02cbde7cd95b947d0cf2fc305fc1a91b555ad62d638dca10f74629c4fb81b"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c273701ba7b959857ae31ca2334dc488ad888fa5f66e0c50809bb46143f3c9fa"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c303cff7c44d87e47741bb076babe52180f20889d104f7ed50ed7b2f77413b33"}
{"level":"info","ts":"2026-07-06T20:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbc5e09d702602f37be5c163cb7498b18694d23337feac0cdb635ac3dfce859c"}
{"level":"info","ts":"2026-07-06T20:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73036e871bd885aa50892cf14a3c885e8b44233caf7adc49468b0ed0fdb01616"}
{"level":"info","ts":"2026-07-06T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d8833c657d582f06e987caee890e96205f34db4324ecc31e9c6bdee69a4184b"}
{"level":"info","ts":"2026-07-06T20:33:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/638353d0cbfb54c6f9be3e4f092127508c278e0ec14fbb4f484e9c8961cc3890"}